Briefly describe the areas that should be considered when creating an incident response team (IRT).

Question

What will be an ideal response?

Answer 1

IRTs are composed of individuals from the following areas:
* Senior management-These decision makers need to be involved and must understand the actual function of the IRT. They are the ones to give valuable business decisions in times of crisis.
* IT personnel-The chief security information officer and other IT management personnel can provide detailed assessment of the damage caused by the attack.
* Corporate counsel-The corporate lawyer should always be aware of the activities of the IRT. From beginning to end, the counsel should be present to ensure that no applicable laws are violated concerning the company or an individual.
* Human resources-If the IRT comes across incidents that involve employees, then an immediate response from Human Resources is needed. This includes checking to see whether certain incidents actually violate existing policies, and in extreme cases whether employees should be terminated or merely counseled.
* Public relations-Public image is often a major priority of an organization. Public Relations personnel should know the nature of the security incident because they often advise or decide on what can and cannot be said to the general public.