Why Incident Response Must Evolve | Alex Levy on Cyber Recovery

Traditional incident response plans must evolve to keep pace with modern cyberattacks and the speed businesses need to recover. Alex Levy, CISO at BNSF Railway and winner of the TIME + Commvault CISO of the Year branded award, shares why modern incident response requires greater automation, self-healing capabilities, and a focus on both recovery and root cause analysis. Alex also discusses using smaller, more resilient and recoverable environments to help limit the blast radius of an attack. These are the conversations we're SHIFTing at SHIFT 2026 in Nashville, where leaders will explore continuous recovery, ResOps, and new approaches to resilience in the age of AI. LEARN MORE 📌 Get your Tickets for SHIFT Nashville: https://bit.ly/4jvB2Ip KEY TAKEAWAYS 📌 Modern incident response needs greater automation 📌 Recovery is only part of the challenge; triage and root cause analysis also matter 📌 Smaller, recoverable environments can help limit the blast radius of an attack 📌 Automated rebuilding can help organizations respond to compromised environments 📌 Maintaining visibility is critical for determining the root cause of an attack TL;DR Alex Levy explains why modern cyber incident response requires automation, resilient environments, and recovery strategies designed to limit the impact of an attack. #SHIFT2026 #CyberRecovery #CyberResilience #IncidentResponse #Cybersecurity #ResOps #Commvault