structure, and roles and responsibilities. This assumption excludes any ad hoc or informal incident response activity that does not have a defined constituency or documented roles and responsibilities. This assumption is driven by the belief that, without a formalized incident response...