I have worked in a [[Computer Security Incident Response Team]]. Working through incidents in a [[Incident response lifecycle]]. Running a [[Security Orchestration, Automation and Response]] system. A lot of [[Computer Security Incident Response Team|CSIRT]] are connected through [[ENISA]].