THE CASE
It is 2am. You are the CISO of a large enterprise running a Big Data platform. A critical anomaly has just fired on your SIEM. The scope is unknown. The on-call analyst has flagged you and is waiting for your call.
Four decisions ahead. Each one has a regulatory, legal, or governance consequence under NIS2 and DORA.