Where the IR team should be located

It might not always be possible to assemble all response team members at the location of an incident all the time. The team is made up of diverse talents and they will not always all be active employees of a given organization. Furthermore, many companies have branches across vast geographic areas, and cybersecurity incidents can occur at any place and at any time. Therefore, having a primary response team physically on-site whenever any incident happens is hard, but there are alternatives. Some of the response team members could participate remotely using live video calls and screen sharing applications. Similarly, the team could be composed of individuals that can be reached at any time of day or night. Moreover, some team members could travel to the site while the response process is ongoing if a physical presence is necessary.

Cloud-based server solutions are extremely effective solutions to incident reports. In this case, assembling...