How the IR team should be supported
The IR team requires adequate facilitation during the disaster recovery process, otherwise, they might run into unnecessary delays, which could cost the company. Therefore, organizations should support the team through a number of channels. Firstly, appropriate training; the IR team must always be ready to handle a security event. To ensure this, the organization should perform regular training so that each team member is familiar with the roles they will perform during the response process. Failure to train properly might lead to confusion and ineffectiveness when an actual security event occurs.
Security incidents are unpredictable, thus, can happen at any time. Therefore, as a second support channel, the response team should always provide adequate resources as required to respond to an event. There should be a budget set aside to cover all the costs that the team might incur, and there should be technical resources available in the event...
