My principle focus is on the solid development of an IRP which we can use for testing/training as often as possible (goal is monthly, acceptable will be quarterly).  I am looking to work with the team to come up with viable scenarios, run through a table top test while rotating the test lead for each iteration.  The goal is to test the plan, but really more importantly to get as many people confident and comfortable with incident response as possible.  We all know its coming at some point or another and the faster the response the better.  Just do it!  (Graphic from Microsoft)   ... View more