Many companies have incident response playbooks; for CISOs, however, the challenge is turning static documents into living strategies that deliver when the breach happens.