Last year we brought you Sirtfi, the Security Incident Response Trust Framework for Federated Identity, which lays the foundations for incident response by requiring confidential information exchange and a baseline of good practices in operational security. But, is that enough? What happens when a security incident kicks off? Does your identity federation have plans? In this lightning talk we will highlight the importance of putting security incident response procedures in place… before they are needed! Come and find members of the REFEDS Sirtfi Working Group during the poster sessions to discuss security incident response in your identity federation. Work by the REFEDS Sirtfi Working Group and the AARC Project is available to guide you. Let’s create a network of identity federations and interfederation that is ready to support our services, identity providers and researchers during security incidents.