Darren and Marc discuss incident response in cybersecurity in this episode, with a focus on the importance of disconnecting rather than shutting down during security incidents.

They cover the four phases of incident response: Discovery, analysis, action, and postmortem, highlighting the shift in cybersecurity from prevention to effective response due to the inevitability of breaches.

They look at the complexity of achieving a perfectly secure system and stress the importance of continuous improvement and preparation in cybersecurity practices.