> incident response provider

So they use third-party for incident management? They are de-risking by spending more, which is a loose-loose for the customers.