Incident Response: A Strategic Guide to Handling System and Network Security Breaches

Chapter 4. Forming and Managing an Incident Response Team

From time to time, we’ve mentioned the word “team” in the process of covering various topics related to incident response. This chapter delves into forming and managing an incident response team—what a response team is, the rationale for forming an incident response team, major issues that must be addressed, and special management considerations. These topics are particularly important. Many incident response efforts fail or flounder because of mistakes made in forming and/or managing a response team. This chapter again presents the authors’ perspectives and real-life experiences in ...