[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-202702-105":59,"doc-detail-202702-en":130},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":123,"head_meta":125,"extra_data":127,"updated_unix":129},105,"en","cyber-incident-response-where-theory-meets-chaos-april-29-2026","Cyber Incident Response: Where Theory Meets Chaos - April 29, 2026","","Cyber Incident Response: Where Theory Meets Chaos examines real-world cybersecurity disruptions where incident response plans are tested under simultaneous failures and coordinated attacks. The session walks through the complete incident response lifecycle using examples such as the CrowdStrike outage and casino breaches, highlighting overlooked gaps like physical access to impacted systems. It also explains why tabletop exercises remain essential and how AI is reshaping both threats and defensive capabilities, targeting practical skills and critical thinking for responders.",{"@graph":69,"@context":122},[70,84,105],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":30,"@type":76,"position":81},"https://docshare.wps.com/document/technology/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/cyber-incident-response-where-theory-meets-chaos-april-29-2026/202702/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":99,"encodingFormat":97,"isAccessibleForFree":100,"interactionStatistic":101},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/cyber-incident-response-where-theory-meets-chaos-april-29-2026/202702.png","ImageObject",300,407,{"name":92,"@type":93},"supergirl","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-10-06","2026-09-04",true,{"@type":102,"interactionType":103,"userInteractionCount":44},"InteractionCounter",{"@type":104},"ViewAction",{"@type":106,"mainEntity":107},"FAQPage",[108,114,118],{"name":109,"@type":110,"acceptedAnswer":111},"What incidents are used to illustrate the talk’s incident response lessons?","Question",{"text":112,"@type":113},"The talk uses examples such as the CrowdStrike outage and casino social-engineering breaches, showing how plans perform under chaotic, real conditions.","Answer",{"name":115,"@type":110,"acceptedAnswer":116},"Which part of incident response does the session cover in depth?",{"text":117,"@type":113},"It explores the complete incident response lifecycle and the critical lessons learned from major breaches.",{"name":119,"@type":110,"acceptedAnswer":120},"Why does the talk emphasize tabletop exercises?",{"text":121,"@type":113},"Tabletop exercises are presented as especially valuable because they help surface gaps—such as overlooked physical access issues to crashed systems—before real incidents occur.","https://schema.org",{"og:url":83,"og:type":124,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":126,"canonical":83},"index,follow",{"doc_id":128,"site_id":62},202702,1788550212,{"code":4,"msg":5,"data":131},{"doc_id":128,"user_id":132,"nickname":92,"user_avatar":133,"doc_module":4,"category_id":29,"category_name":30,"doc_title":65,"doc_description":67,"doc_content":134,"file_id":135,"file_url":136,"file_type":137,"file_size":138,"view_count":44,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":8,"language":139,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":140,"faqs":141,"seo_title":142,"seo_description":67,"update_tm":129,"read_time":81},962088121634,"https://ap-avatar.wpscdn.com/davatar_9964176cb1d06d4a9deccf72a44ae3dc","Charles Snyder, CISSP, CISA, CISM  \nExecutive Director, CAI Cybersecurity  \nCyber Incident Response: Where Theory Meets Chaos  \nWednesday, April 29, 2026 3:00pm in Moench E104  \nWhen millions of Windows systems crashed simultaneously from a security tool meant to protect them, or when two major casinos fell victim to sophisticated social engineering attacks on the same day, the carefully crafted incident response plans met their ultimate test. This talk takes you inside real-world cybersecurity incidents—from the $5.4 billion CrowdStrike outage to casino breaches that paralyzed operations—to reveal what actually happens when theory collides with chaos.  \nDrawing from hands-on experience leading incident response efforts across multiple industries, this presentation explores the complete incident response lifecycle while examining critical lessons learned from major breaches. Discover how even the most prepared organizations struggle with overlooked gaps like physical access to crashed systems, why tabletop exercises matter more than ever, and how AI is fundamentally changing both the threat landscape and defensive capabilities. Whether you're beginning your cybersecurity journey or deepening your technical expertise, you'll gain practical insights into the skills, frameworks, and critical thinking that separate effective incident response from costly failures.  \nAbout the speaker: Charles Snyder is Executive Director of CAI's Cybersecurity practice, where he leads cybersecurity compliance, technical, risk, and governance projects for clients across manufacturing, transportation, education, hospitality, and government sectors. With credentials including CISSP, CISA, CISM, PMP, and CBCP, Charles has over 20 years of experience in IT security, risk consulting, and project management. He has developed industry-first assessment tools, led penetration testing engagements, and designed comprehensive tabletop exercises for both executive and technical teams. A graduate of Rose-Hulman Institute of Technology (BSEE) and Eastern Kentucky University (MBA), Charles has authored numerous cybersecurity articles and spoken at regional, national, and international conferences with organizations including PMI, ISACA, and the MIS Training Institute.","cbCaiekysZOr71du","https://ap.wps.com/l/cbCaiekysZOr71du","pdf",168842,"English","# Incident scenarios and outcomes\n## Incident response lifecycle overview\n## Lessons learned and tabletop exercises\n## AI impacts on threats and defenses\n# Speaker background and credentials","[{\"question\":\"What incidents are used to illustrate the talk’s incident response lessons?\",\"answer\":\"The talk uses examples such as the CrowdStrike outage and casino social-engineering breaches, showing how plans perform under chaotic, real conditions.\"},{\"question\":\"Which part of incident response does the session cover in depth?\",\"answer\":\"It explores the complete incident response lifecycle and the critical lessons learned from major breaches.\"},{\"question\":\"Why does the talk emphasize tabletop exercises?\",\"answer\":\"Tabletop exercises are presented as especially valuable because they help surface gaps—such as overlooked physical access issues to crashed systems—before real incidents occur.\"}]","Cyber Incident Response: Where Theory Meets Chaos - April 29, 2026 | PDF"]