Sara Madden

It's keep repeating the tabletop exercises and you get better at it.

It's that simple, I think.

Yeah.

And I love that suggestion.

And also just resist the urge to manage them.

They don't learn if you tell them how to do it right every single time.

So sit there quiet, suck it up.

let them fail and fail forward, right?

Like we talked in the beginning about mistakes.

Mistakes are good.

It's how people learn, right?

So I have three different functional teams and we do the tabletops with everybody.

And so I think usually an incident response is primarily your security engineers that are running it.

But there's a lot of cross-functional knowledge that has been really valuable for the identity management team to be a part of it.

They see how to figure out things quicker and they are contributing more and more useful insights as we go through the tabletops.

And so I think...

their cross-functional knowledge is super helpful.

And then another part of my team does all of our audit and compliance and like security programmatic stuff.

And so as we run through tabletop scenarios, they'll realize, oh, I could tune this policy this way to make sure that this kind of scenario doesn't happen again.

And so I think the consistency of it and the growth that we've had as a team has been cross-functional more so than it's been lateral with the SecOps team because they're good at this and they do it all the time.