In this chapter, you’ll learn how to assemble and organize an incident response team, how to arm them and keep them focused on containing, investigating, responding to and recovering from security incidents. In any team endeavor, goal setting is critical because it enables you to stay focused, even in times of extreme crisis and stress. Even though we cover true “armature” in terms of incident response tools in Chapter 4, we’ll share some of the secrets of internal armor - advice that will help your team be empowered in the event of a worst-case scenario.Īnd second, your cyber incident response team will need to be aimed.
First of all, your incident response team will need to be armed, and they will need to be aimed. In fact, there are several things we’ll cover in this chapter of the Insider’s Guide to Incident Response. A first key step is to clearly define the incident response team roles and responsibilities (we'll cover all that ground in this guide). That’s why having an incident response team armed and ready to go - before an actual incident needs responding to, well, that’s a smart idea.
As one of the smartest guys in cyber security points out below, some things can’t be automated, and incident response is one of them. Incident Response Team: What are the Roles and Responsibilities?Īs much as we may wish it weren’t so, there are some things that only people, and in some cases, only certain people, can do.
0 kommentar(er)
