As the World Economic Forum spotlights AI governance and cyber resilience this week, how have you adapted your incident communications playbook to assess materiality fast under the SEC’s cyber disclosure rules? What's one tabletop scenario or decision criterion that proved decisive in a real event?