Incident response bottlenecks – you know they’re real and you know that your incident response system probably has a few, but they must be minimized