How Large Should Your IR Team Be And Should They Be Dedicated Resources?

  • Thursday, October 31, 2013 | 13.30 – 14.20 hrs | Room: Amsterdam

View all Sessions

Many customers we work with have a hard time understanding how large (or small) their Incident Response team should be. Which functions should be included? Do the resources need to be dedicated or can they be loaned from another team within InfoSec or across IT? Let's explore some common approaches together and discuss the pros and cons of a few typical approaches to staffing the IR function.


This document was retrieved from on Sun, 21 Jul 2019 05:27:45 -0400.