Cisco has a very interesting article recently on “Who’s Performing Computer Incident Coordination”.
The premise of the article is to give a high level overview of the roles and tasks a CSIRT needs to perform when an incident occurs. It’s certainly worth a read, even if you’re only considering starting an Incident Response Team within your
This does raise the question, are the larger organizations really doing enough when it comes to Incident Response ?
Do you have a team fully capable of dealing with an incident ?
The full article can be read here.