Chapter 5. Forming the Puzzle

At this point, we have formed the border of our incident response puzzle, laying the foundation on which the team will be built. Now it's time to start filling in the middle sections to complete the picture of the team. The first major corner section we will address is resources. Although there are many types of resources to consider, the most valuable resource for any incident response team is always the people—the incident handlers, the system administrators, and the team leaders. Without the proper mix of personnel, the team will not be effective even if it has the latest and greatest hardware and software at its disposal. Therefore, several sections will be devoted to discussing considerations that directly ...

Get Effective Incident Response Team, The now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.