Identity teams know how to defend, contain, and recover—but in a real crisis, technical execution often collides with business disruption, legal obligations, and executive pressure. This panel explores what CISOs and business leaders must have prepared in advance to support AD and IAM experts: clear decision authority, business-aligned recovery priorities, out-of-band coordination, and defensible communications.