Action Bias and the Two Most Dangerous Words in Cybersecurity Incident Response: An Argument for More Measured Incident Response

An inherent aspect of cybersecurity is managing incidents where people expect to see an immediate response. Action bias is our tendency to favor action over inaction because it makes us feel better—even if we have made things worse.