Which of the following representatives in the incident response process are included in the incident response team?

Which of the following representatives in the incident response process are included in the
incident response team? Each correct answer represents a complete solution. Choose all that
apply.

A.
Information security representative

B.
Legal representative

C.
Technical representative

D.
Lead investigator

E.
Human resources

F.
Sales representative

Explanation:

Incident response is a process that detects a problem, determines the cause of an issue,
minimizes the damages, resolves the problem, and documents each step of process for future
reference. To perform all these roles, an incident response team is needed. The incident response

team includes the following representatives who are involved in the incident response process:
Lead investigator: The lead investigator is the manager of an incident response team. He is
always involved in the creation of an incident response plan. The duties of a lead investigator are
as follows:Keep the management updated.Ensure that the incident response moves smoothly and
efficiently.Interview and interrogate the suspects and witnesses.
Information security representative: The information security representative is a member of the
incident response team who alerts the team about possible security safeguards that can impact
their ability to respond to an incident.
Legal representative: The legal representative is a member of the incident response team who
ensures that the process follows all the laws during the response to an incident.
Technical representative: Technical representative is a representative of the incident response
team. More than one technician can be deployed to an incident. The duties of a technical
representative are as follows:Perform forensic backups of the systems that are involved in an
incident. Provide more information about the configuration of the network or system.
Human resources: Human resources personnel ensure that the policies of the organization are
enforced during the incident response process. They suspend access to a suspect if it is needed.
Human resources personnel are closely related with the legal representatives and cover up the
organization’s legal responsibility.