SysAdmin Weekly - 037 - When Incident Response Plans Meet Reality

[asyrewicze]

Hey All!

Just dropped a new episode of SysAdmin Weekly that digs into incident response, disaster recovery, and business continuity. The episode talks specifically about why so many plans look great on paper and then completely fall apart the moment something actually goes wrong.

Episode links

Transcript for this episode can be found here >
sysadmin-weekly-037-incident-response-plans-meet-reality.txt

Full episode of the podcast can be viewed here:

YouTube - https://youtu.be/n_AvIKPoM7g
Spotify - https://open.spotify.com/episode/0MNGmYiGlGk6l9v8HrpZit?si=kLvUMflnSVWzl9IBISTyPQ
Also, don't forget our newsletter! It was just updated yesterday! - https://newsletter.sysadminweekly.com/

Discussion Continues

In this episode, Eric and I Discuss:

• Why incident response is more about people and process than tools
• Tabletop exercises: how to run them without turning them into blame sessions
• The gap between fast detection and painfully slow response
• What happens when no one on-call is actually empowered to make decisions
• Ransomware, MFA bombing, and modern “oh no” scenarios
• Lessons learned from recent real-world tabletop exercises (fresh wounds included)

If you’ve ever:

• Been the only one awake at 2AM trying to decide how bad “bad” really is
• Discovered your DR plan is just a PDF no one’s opened in years
• Had to play incident quarterback without a playbook

…this one’s for you.

I’d love to hear from you!

Tell us about your:

• Your tabletop horror stories (or wins)
• Real incidents that taught you painful but valuable lessons
• What you wish your org understood about incident response

Drop your thoughts below 👇

Happy Friday and have a great weekend!