Chapter 4. Forming and Managing an Incident Response Team

From time to time, we've mentioned the word "team" in the process of covering various topics related to incident response. This chapter delves into forming and managing an incident response team ‚ what a response team is, the rationale for forming an incident response team, major issues that must be addressed, and special management considerations. These topics are particularly important. Many incident response efforts fail or flounder because of mistakes made in forming and/or managing a response team. This chapter again presents the authors' perspectives and real-life experiences in dealing with the many issues related to this area. We will begin by considering the most fundamental part of an "incident response team" ‚ the meaning of the term itself.