# Competence + Transparency = Trust

By [Doug Lane](https://paragraph.com/@axalane) · 2022-03-30

---

So, it looks like we're going to get to watch a [supply chain security incident](https://mirror.xyz/axalane.eth/-nuGX7etY9izRVfwAMAoWg0WokjJ_OMMD1Gw3VpfNpE) unfold in real-time. As noted briefly in yesterday's email, [it wasn't a great day](https://www.okta.com/blog/2022/03/updated-okta-statement-on-lapsus/) for Okta.

But rather than piling on with criticism of Okta's response, take a master class in supply chain security crisis response from Cloudflare. A major security vendor in their own right, Cloudflare was one of the Okta customers whose information was visible in the screenshots shared by the Lapsus$ hacking group.

Even as their own incident response was unfolding, Cloudflare CEO Matthew Prince was out with [an initial Tweet acknowledging the issue](https://twitter.com/eastdakota/status/1506143353544478724) at 1:38 a.m. Eastern time. By early yesterday afternoon, there was [a blog post up](https://blog.cloudflare.com/cloudflare-investigation-of-the-january-2022-okta-compromise/) with a down-to-the-minute account of Cloudflare's response activities, initial findings, and next steps.

During a crisis, there's a natural tendency to wait until you have all of the answers to communicate. But putting your competence on display early – even if you're working with imperfect information – is the best way to build trust.

\-Doug​

---

*Originally published on [Doug Lane](https://paragraph.com/@axalane/competence-transparency-trust)*