Ethics Opinions: Writing AA/IR Reports instead of the incident handler

Your opinions would be genuinely appreciated. I work for a very large company (>70,000 employees) on a focused incident response team. We have considerable documentation, workflows, docs, etc.

We also have a culture of doing everything by committee. Despite our policies stating that there will be separate discussions for management and non-management during a major incident, during any atypical incident, its thrown out the window. Our own management chain has stated that they don't want to do it any other …

culture cybersecurity discussions docs documentation doing employees etc ethics incident incident response incident response team large management opinions policies reports response team work workflows writing