Executive's role in incident: command, communicate, decide. Not type at a keyboard.
Pre-built comms templates (customer notice, regulator notice, exec update) save the first 30 minutes.
Decide early: who is the spokesperson? Who notifies counsel? Are we paying ransom (almost always no)?