Evidence on Hector Herrerahttps://www.hectorherrera.pro/en/tags/evidence/Recent content in Evidence on Hector HerreraHugoen-USFri, 07 Aug 2026 16:35:00 -0500Designing an operational model for cybersecurity incident managementhttps://www.hectorherrera.pro/en/work/designing-operational-model-cybersecurity-incident-management/Fri, 07 Aug 2026 00:00:00 +0000https://www.hectorherrera.pro/en/work/designing-operational-model-cybersecurity-incident-management/Structuring an incident management operating model that connects governance, roles, playbooks, evidence, communications, exercises, metrics, and continuous improvement.An incident response plan nobody can execute is not really a planhttps://www.hectorherrera.pro/en/ideas/an-incident-response-plan-nobody-can-execute-is-not-really-a-plan/Fri, 07 Aug 2026 16:35:00 -0500https://www.hectorherrera.pro/en/ideas/an-incident-response-plan-nobody-can-execute-is-not-really-a-plan/A plan creates value when a team can activate it under pressure: people know who decides, what to record, what to preserve, how to escalate, and when to close.