The most recent type of incident response team, one that is gaining popularity, is the commercial for-profit team. Commercial teams work on a contract basis and provide technical, procedural, investigative, and legal support to their clients, as required. In an age of outsourcing entire IT organizations, the model of hiring a commercial team can be particularly attractive to companies that cannot afford to staff their own response teams or that simply seek the availability of additional support in preparation for crisis events. This staffing on demand concept works particularly well when coupled with existing internal staffing.
The services that commercial teams offer vary greatly, but the core services usually include the following:
Typically, this consists of business-hour personnel availability with pager, cellular phone, or other off-hour connectivity to incident response staff.
Most professional incident response teams can have a team of their incident response experts on-site within a few hours, depending on travel time.
Services may include technical, procedural, forensics, litigation, expert testimony, and legal/policy expertise.
Commercial teams offer personnel who are trained in incident response and constantly maintain their proficiency in the everchanging ...