Chapter 5. Organizing for Incident Response

Chapter 4,“Forming and Managing an Incident Response Team,” discussed establishing an incident response team. Unfortunately, this is often as far as some organizations go. All too often, a company will go through a major project to design, establish, and train an incident response team. After this is accomplished, the company forgets about it. Team members go back to other jobs, the team never meets or communicates, and when an incident occurs, the team is unprepared to react.

Forming a team is only the first step in the process. Regardless of whether the team is composed of full-time or part-time ...

Get Incident Response: A Strategic Guide to Handling System and Network Security Breaches now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.