Start incident war room for security response before SLAs lapse

Your incoming incident reports land untriaged, causing delayed callbacks and missed containment windows. Response leads get a ready war room and evidence dossier so the team can act before outreach SLAs lapse.