Watch this video on YouTube
How can you tell if information security incident management is working well?