Effective Incident Response Team, The

Chapter 6. Teamwork

All too often in the world of incident response, those responsible for responding to an attack are looking for a very specific, discrete occurrence of an event that occurred on a computer. With so many vulnerabilities prevalent today and so many points of access to computer systems, it would be impossible for one person to identify, respond to, and recover from an attack all alone. Similarly, it is nearly impossible for an incident response team to succeed if the team members try to cover all bases alone. Teamwork, both within the team and in relation to resources external to the team, is vital to successful incident response.

This chapter is devoted to teamwork to reemphasize its importance to successful incident response. ...