Computer Incident Response and Forensics Team Management

Section 1

Introduction

This section introduces the special needs and requirements for Incident Response and Forensics Teams, their construct and development, the members and staff, and the basic framework for response and forensics teams.

Keywords

Incident response framework

When I started as the corporate Computer Security Manager for a large retail organization 15 years ago, there was no response team, no computer security awareness among the IT staff or senior management, and no driving need to implement any security activities, structures, or requirements for the corporate workers. Everyone from the CEO down thought the computer security situation was someone else’s problem and concern—the classic “not my problem” syndrome.

The first task I embarked ...