Summary

In this chapter, we have learned that an IR team is a group of professionals charged with the task of responding to security events. An ideal IR team should be composed of professionals with different areas of expertise. Some of the professionals that should be included in the team are an IT auditor, a primary handler, communications personnel, a legal representative, technical personnel, human resources personnel, a public relations officer, a financial auditor, and a management liaison.

Apart from diverse talents, we have also explored a few other considerations that should be made regarding the IR team. To begin with, the organization should choose members that can offer reasonable availability, uncompromisable integrity, be ready to work in a team environment and be innovative. Further, an organization should facilitate the IR team by offering thorough training and adequate resources to carry out the response and recovery functions. Moreover, organizations should consider...