It’s 10:47 p.m. on a Saturday. Your finance manager is on a beach with limited signal. The IT lead is at a family event. Your operations director has their phone on silent. Somewhere inside your network, suspicious activity has just triggered an alert. Without clearly defined incident response rol...