For organizations responsible for critical infrastructure, cyber incidents can quickly become operational events with consequences that extend far beyond the security team. Drawing from multiple real-world incidents over the past several years, this session will explore the leadership decisions, response challenges, and lessons that emerge when critical systems are put to the test. Attendees will hear how firsthand experience has shaped approaches to incident preparedness, cross-functional coordination, and organizational resilience. The session will provide practical insights for security leaders looking to strengthen response capabilities, prepare their organizations for high-impact events, and apply lessons learned before the next incident occurs.