Microsoft® Windows® Security Resource Kit, Second Edition

Creating an Incident Response Team

The first step in creating a successful incident response process is to identify and enlist the necessary staffing resources. Although it is not essential that these staff members devote all of their time to incident response, defining an incident response team and the capacity in which they will act prevents any uncertainty from occurring during an incident response. Even if you have personnel who devote all of their time to incident response, taking the time now to define the employees who will assist that core group (to provide either specialized skills or additional manpower) will save time during a large-scale response. Furthermore, the members of the incident response team will be in the best position ...