Before I ever led an incident response, I thought leadership meant having the right answers. I believed that the best leaders were the most technically skilled and the most prepared. Incident response taught me something very different. In the middle of a real crisis, leadership is not about knowing everything. It is about how you show up when things are uncertain, stressful, and moving fast.
Some of the most important lessons of my career came during long nights, broken systems, and tense conversations. Those moments shaped how I lead today, not just during incidents but in everyday work as well.
Pressure Changes Everything
When a cyber incident hits, the pressure is immediate. Systems may be down. Data may be at risk. Executives want updates. Employees are confused and worried. The room fills with noise and urgency.
In those moments, people look to whoever is leading. They are not just listening to what you say. They are watching how you act. Your tone, your pace, and your reactions set the emotional direction for everyone else.
I learned quickly that panic spreads faster than malware. If the leader sounds frantic, the team becomes frantic. If the leader stays steady, the team feels grounded enough to think clearly.
Calm Is a Leadership Skill
Staying calm during an incident does not mean ignoring the seriousness of the situation. It means managing your own emotions so you can help others manage theirs.
There have been times when I felt stress rising in my chest while alarms were going off and questions were coming from every direction. In those moments, I learned to slow down my voice, take a breath, and speak clearly.
Calm leadership gives people permission to focus. It tells the team, “We can handle this.” Even when the outcome is uncertain, that calm creates space for better decisions.
Calm is not weakness. It is control.
Clarity Matters More Than Speed
During incidents, everyone wants information immediately. That pressure can push leaders to talk before they think. I learned that unclear communication causes more damage than delayed communication.
If you are not sure about something, say so. If you only know part of the story, share what you know and explain what you are still investigating. People can handle uncertainty better than confusion.
Clear leadership means:
- Explaining what is happening in simple terms
- Outlining next steps even if they may change
- Making sure everyone knows their role
- Avoiding speculation
Clarity keeps people aligned. It reduces rumors and prevents wasted effort.
You Do Not Lead Alone
One of the biggest lessons incident response taught me is that leadership is not a solo act. In a crisis, no single person has all the answers.
Strong incident response depends on teamwork. Technical teams contain the threat. Legal and compliance teams manage reporting. Communications teams handle messaging. Leadership makes risk decisions.
As a leader, your job is to connect these pieces, not to control them. Trust your experts. Let people do what they are good at. Ask questions without undermining confidence.
The best leaders create coordination, not bottlenecks.
Empathy Builds Trust Under Fire
Incidents affect people differently. Some team members thrive under pressure. Others feel overwhelmed. Some employees outside the response team are scared about their work or their data.
Empathy matters in these moments. It changes how people experience the crisis.
I make it a point to acknowledge stress openly. Saying something as simple as “I know this is intense” can ease tension. Checking in with team members after long shifts shows that their effort is seen.
Empathy does not slow response. It strengthens it. People who feel supported stay engaged and perform better under pressure.
Blame Is the Enemy of Progress
After an incident, there is often a desire to find fault. Who clicked the link. Who missed the alert. Who made the wrong call.
I learned early that blame shuts people down. It makes teams defensive and quiet. That is the opposite of what you need during and after a crisis.
Good leadership focuses on learning, not punishment. Once systems are stable, the right question is not “Who caused this?” It is “What can we improve so this is less likely next time?”
When people know they will not be blamed for honest mistakes, they report issues faster. That alone can dramatically reduce impact.
Decision Making Under Uncertainty
Incident response rarely offers perfect information. Leaders must make decisions with incomplete data and limited time. That can be uncomfortable.
I learned to be transparent about that discomfort. Saying “Based on what we know right now, this is the best choice” helps teams understand the reasoning. It also allows room to adjust as new information comes in.
Strong leadership under pressure is flexible. It balances decisiveness with humility.
Taking Care of the Team After the Storm
When an incident ends, there is often relief followed by exhaustion. This is where leadership still matters.
Teams need time to recover. They need space to talk about what happened. They need recognition for the work they did under stress.
I always push for a proper debrief. Not just a technical review, but a human one. What worked. What was hard. What we would do differently.
This helps teams process the experience and prevents burnout from quietly taking hold.
How Incident Response Changed My Leadership Style
Before incident response, I thought leadership was about being the smartest person in the room. After living through real crises, I see it differently.
Leadership is about:
- Staying calm when others feel overwhelmed
- Communicating clearly when things are uncertain
- Trusting your team and supporting them
- Showing empathy without losing focus
- Turning mistakes into learning
These lessons apply far beyond cybersecurity. They apply anywhere pressure exists.
Be Grateful
Incident response is intense. It tests systems, processes, and people all at once. It also reveals what kind of leader you are and what kind of leader you want to be.
I am grateful for the lessons it taught me, even the hard ones. They showed me that leadership under pressure is not about control or perfection. It is about presence.
When leaders bring calm, clarity, and empathy into chaos, teams find their footing. That is when real leadership shows up.