Develop, maintain, and continuously improve the Incident Response Plan (IRP) and detailed playbooks for a range of threat scenarios, including ransomware, phishing, insider threat, and thirdāparty incidents, ensuring alignment with evolving attack methods and regulatory requirements. Conduct PostāIncident Reviews (PostāMortems) to assess root cause, response effectiveness, and control gaps, driving continuous improvement of security posture, policies, and processes.