Early incident information will be incomplete. Directors need a clear account of business impact, response authority and the decisions that cannot wait.