Designing the Response
The plan you write before the pager goes off: the incident response lifecycle, runbooks versus playbooks, severity and escalation, OpsCenter and Incident Manager, pre-provisioned responder roles and a forensics account, and Shield Advanced protections configured ahead of the DDoS you expect.
Content current as of 2026-10.
Lessons
- Runbooks, playbooks, and severity
- Prepared access and blast radius
- Preparing for the attacks you expect