Present to the audience in real world actionable things they can do right now to move closer to intentional resilience instead of traditional incident response. Mainly focused on the 5 must do and have objectives around identity, communication, documentation, simulations, and real world practice. Will walk through de-identified incident and really dive into the technical and strategic of actions attendees can take today to be much better practiced and prepared.