Effective Incident Response Team, The

Putting the Team Together

Coverage Options

Before selecting the members of an incident response team, several considerations must be addressed that will have a direct impact on the number of personnel needed. The first consideration is the hours of operation for the team. The underlying requirement that must be met is the provision of the proper amount of coverage. Because attacks can and do happen at all hours of the day from all points of the globe, the best coverage is to ensure around-the-clock (24 × 7) monitoring and response capabilities. This coverage may be provided in three ways: through direct resources available on-site around the clock, through on-site coverage during mission-critical hours with outsourced or on-call coverage after ...