How do you prioritize tasks when dealing with multiple security threats at the same time? Provide an example.

I prioritize tasks based on the severity and potential impact of the threats. For example, during a recent period of increased phishing attempts, I assessed the threat level against critical systems, leading me to allocate more resources towards protecting our email gateways while also training teams to recognize the attacks. Utilizing a risk matrix helped in visually representing and prioritizing tasks effectively.