Glossary: Security Operations and Incident Response
Incident manager
Also written: incident lead, incident commander
The one person who runs the response: sets priorities, assigns tasks and keeps the timeline. Alex plays this role at Kettle & Crane.
Where the book teaches it
Related terms
CSIRT (computer security incident response team)Incident response planManagement (executive sponsor)