Designate An Incident Response Leader
A single person should be in charge of incident response, according to the NIST recommendations. An alternate should also be selected. The leader should be the liaison with upper management and other teams, have technical knowledge and solid communication skills, and be adept at defusing crisis situations. Often the response team will have a technical leader, as well, to review the forensics team's work.