Incident Response and Creating the CSIRT in Corporate America

There are many challenges faced by the brave few who have tried to implement a formal incident response mechanism within a corporation. They usually face a number of barriers that eventually wear down even the most stalwart of advocates. These challenges usually come in the form of politics. The purpose of this document is to discuss why these challenges may exist and suggest a way to successfully implement a formal incident response organization. However, the needs of each organization are unique. Therefore, the reader should keep in mind that these are guidelines and should take their company's needs into consideration.