Knowing how to react is everything
I have always emphasised the importance of visibility and forward thinking in enterprise security. However, in my experience, incident management is the most important, yet least well-executed, skill in all organisations.