Cisco has a very interesting article recently on “Who’s Performing Computer Incident Coordination”.

The premise of the article is to give a high level overview of the roles and tasks a CSIRT needs to perform when an incident occurs. It’s certainly worth a read, even if you’re only considering starting an Incident Response Team within your
own organization.

This does raise the question, are the larger organizations really doing enough when it comes to Incident Response ?

Do you have a team fully capable of dealing with an incident ?

The full article can be read here.