Incident Response Team + Exercises

A member of management

or organizational leadership

Information security

staff members

Technical experts

such as systems administrators, developers, or others from disciplines throughout the organization

Communications

and public relations staff

Legal and human resources (HR)

staff may be included in some, but not all, incidents

Law enforcement

is sometimes added to a team, but in most cases only when specific issues or attacks require their involvement

Tabletop exercises

are used to talk through processes

Simulations

can include a variety of types of events