Add agent disablement and rollback; credential revocation; boundary-violation escalation; integrate into IR
Resilience and continuity / Sub-Thread
Incident response and escalation
Resilience and continuityM
Thread navigation
Key activities
Current metadata
T-shirt size
M
Recommended C-suite owner
CISO (with COO)
Recommended operational owner
Security Operations Lead + AI Incident Response Lead
Impacted Level 1 areas
Impacted Level 2 areas
Governance
Accountability
Open Level 2 detail
Governance
Controls
Open Level 2 detail
Governance
Operating model and committees
Open Level 2 detail
Governance
Risk management
Open Level 2 detail
Process & tooling
Lifecycle management
Open Level 2 detail
Process & tooling
Monitoring and observability
Open Level 2 detail
Impacted Level 3 activitiesgrouped by Level 1
Governance
4 linked Level 3 activities
Accountability
Escalation paths (update existing)
Open Level 3 detail
Controls
Enhanced agent observability requirements (incl drift triggers)
Open Level 3 detail
Operating model and committees
Programme governance cadence (forums, packs, KPIs)
Open Level 3 detail
Risk management
Incident response and crisis playbooks
Open Level 3 detail
Process & tooling
2 linked Level 3 activities
Return
Back to Resilience and continuity
Back to thread detail
Hierarchy
Return to the hierarchy view
Open the map