Managing an IT security incident isn’t so different from fighting a fire. Both demand rapid assessment, tight coordination, decisive action, and constant feedback. Drawing on backgrounds in cyber security, incident response, forensics, and volunteer firefighting, we use this analogy to show how crisis management principles apply across both worlds.