Section 4

The Security Incident Response Team Members

The knowledge and skill of the incident responder is paramount to the successful handling of any incident, so this section describes these skills and abilities. The skills, abilities, and knowledge of the team member are usually in two areas: technical and personal.

Keywords

Incident handler; first responder

The knowledge and skill of the incident responder is paramount to the successful handling of any incident. The incident responder has to be able to demonstrate impartiality and to know the importance of identification, coupled with collecting and cataloging any evidentiary findings in context with surrounding factors.

■ The incident responder needs to be logical in their approach to each and ...

Get Computer Incident Response and Forensics Team Management now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.