As organizations move to the cloud, many have found that running a cloud incident response program becomes a challenge. The ways that cloud event data are generated, extracted and stored are different from traditional infrastructure. Tried-and-true methods for logging, investigation and forensics no longer work in cloud environments. On top of that, we have both IaaS and SaaS to contend with. This session brings together practitioners and technologists to discuss the practical details of starting, running and maintaining a cloud incident response program and why cloud incident response really hinges on cloud incident readiness. You'll also hear practical guidance for attaining incident readiness.