This Twitter thread by Alex Stamos (former Facebook CSO) is a good rebut to this: https://twitter.com/alexstamos/status/1046783533220421632. Bottom line: you can do incident response quickly or correctly, but not both.