The CrowdStrike incident is potentially one of the most impactful cybersecurity stories of the decade.Risk management professionals must elevate damaging software from a provider to a higher risk category.Employees must be prepared for opportunistic exploiters taking advantage of such situations.The response to the incident was manual and laborious, with some IT personnel going door-to-door to fix machines.Organizations must enable N+1 redundancy in their security measures.IT departments should hold a meeting to review the effectiveness of their response to the CrowdStrike incident.The incident shows we cannot trust software updates without question, and companies should reassess their incident response plan.IT needs to treat cybersecurity updates like standard software patches.The devil is in the details, and chaos is in the code.