When a cyber incident strikes, technical containment is only one part of the response. In that situation, boards and executives must make regulatory, legal and communication decisions before the technical investigation is complete. The governance challenge is to act quickly...