What should be among the first tasks performed by the IR planning committee? Do these change as management considers which of the two main incident response philosophies or strategies it wishes to use?
What key decisions must be faced by management and by senior organizational leaders during the incident response planning process? What role do these non-operational managers (ie, directors, CEO, etc.) have during the handling of an incident?