When an incident hits, the first 30 minutes decide whether a team fixes it in hours or stalls for days. In this 10‑minute interview Alex Morgan and a senior property manager walk a human vignette—a night‑shift engineer whose single blurry photo cost a recovery 36 extra hours—to make stakes tangible. The episode delivers a governance‑first, vendor‑neutral playbook: prioritized captures (timestamped photos, labeled device IDs, short log snapshots), privacy rules to avoid PII collection, lightweight evidence‑handling practices that preserve integrity without legalese, and a repeatable 30‑minute rehearsal with defined roles and acceptance checks. Listeners get three concrete actions to run this week and a measurable success metric: run the 30‑minute drill and time your evidence packet assembly (target: under 30 minutes). Download the one‑page 30‑Minute Incident Evidence Checklist and templated packet from the show resource hub. This episode is practical, not forensic or legal advice, and emphasizes operational boundaries and anonymized examples.