Computer incidents involve a range of activities for a range of team members. Discuss the potential activities and the corresponding skills that would be required to ensure an effective response to an incident from beginning to complete resolution. Include the roles that would participate in working with the external forensics partner, and which roles would be involved with evidence collection, interviewing witnesses or suspects, or preparing for expert testimony.
