gaps

It’s Monday morning. The crisis team has just wrapped up a grueling 3-hour cyber incident tabletop exercise. Coffee cups are empty, whiteboards filled with findings line the room, and you can almost feel the collective relief in the air. The “crisis” is over—at least the simulated one. Everyone nods, agrees it was “useful,” and then…