Skip to Content
Incident Response
book

Incident Response

by Kenneth R. van Wyk, Richard Forno
August 2001
Intermediate to advanced
240 pages
8h 28m
English
O'Reilly Media, Inc.
Content preview from Incident Response

Fire Drills

By now, the plans for your team should be taking shape, as you have considered planning, staffing, documenting, and marketing your team’s services, policies, processes, and procedures. At some point (hopefully before a real emergency occurs) it will be beneficial to conduct some fire drills to test your team’s capabilities. Going back to the fire department analogy, the fire chief doesn’t send all his resources, trucks and staff, out the door for each alarm; rather, a specific group of resources is deployed depending on the type of emergency.

One thing to bear in mind is that drill is never a substitute for the real thing; it’s easy to train and drill, but until the team is actually battle-tested, you’ll never really know how it responds under real pressure. The two primary goals of training are to foster effective operational teamwork, and to transform written processes and procedures into instinctive actions for the team so that during a real crisis, effort is focused on the problem at hand, not on applying the basics.

Nonetheless, a good training program is important for the team as well as for the nonteam players we discuss earlier in this chapter. The most common types of fire drills are role-playing and live drills. In role-playing drills, the team -- along with any other drill participants -- sits in a room and acts out a realistic scenario and its associated response. In a live drill, however, the team’s procedures are tested, with few of the participants aware ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

AirBnbBlueOriginElectronic ArtsHomeDepotNasdaqRakutenTata Consultancy Services

QuotationMarkO’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.
Julian F.
Head of Cybersecurity
QuotationMarkI wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.
Addison B.
Field Engineer
QuotationMarkI’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.
Amir M.
Data Platform Tech Lead
QuotationMarkI'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Mark W.
Embedded Software Engineer

You might also like

Intelligence-Driven Incident Response

Intelligence-Driven Incident Response

Scott J Roberts, Rebekah Brown

Publisher Resources

ISBN: 0596001304Catalog PageErrata