During a major cyber incident, the distinct responsibility of a dedicated Crisis Management Team (CMT) is to manage the overall organizational impact, strategic decision-making, and preservation of the organization's reputation and long-term viability, whereas the technical incident response team focuses on the hands-on technical remediation of the cyberattack itself. The technical incident response team, often referred to as the Incident Response Team (IRT), is primarily responsible for the immediate technical aspects of detecting, containing, eradicating, and recovering from the cyber incident. This includes activities such as analyzing malicious code, isolating affected systems, performing forensic invest....
Log in to view the answer