Identify Key Organizational Stakeholders
Identify other key personnel and groups that need to be part of incident response planning, according to the NIST guidance. Management establishes policy, budget and staffing. The legal counsel can help determine liability limitations on incident sharing. Human resources should be involved if employee discipline is required, and business continuity planners should be on board to help ensure the business continuity plan is also being followed.