US cybersecurity agency CISA had to build its incident playbook during the incident, agency reveals

CISA had to create its incident response plan during a real incident after a contractor's employee exposed sensitive information on GitHub. This highlights the importance of having a pre-existing plan in place. CISA should review its incident response procedures to prevent similar situations in the future. Engineers should ensure their organizations have a well-documented incident response plan.