6 scenarios × 5 phases (detect / triage / contain / disclose / recover). Pick decisions, see canonical answer + framework rationale. Train cross-functional teams without burning a real incident.