Excellent article - thank you.

The ideas are very hard to apply in incident response situations where things must happen quickly.