[lawrjone]

My experience is mostly in a company of about ~700, working in a regulated environment (payments).

This guide is how we ran incidents, or at least at the top end of the complexity of each section.

So if by small you mean companies under 1500, then I'd agree. But also, that's a lot of companies, in fact the majority of them!

We definitely see success with our customers up to the 1500 range adopting these practices, and often throwing out more convoluted or obscure processes that came before.