Effective Incident Response Team, The

Using the Tools

If you're reading this chapter and think that it's covered a lot of intricate puzzle pieces, you're right. You don't have to use all of the pieces to create a good incident response team.

If you're only concerned with vulnerabilities from the network perspective (i.e., you have only trusted people with physical access to the systems themselves), you may decide that a simple vulnerability scanner is enough for your team.

If you're making decisions based on risks (i.e., attempting to balance the right level of security with the right level of ease of use for your e-commerce business), you may want to invest in tools and practices that will help you gather the best available information for making these decisions.

In all of these ...