The Orchestration Journey in incident response