The Incident Response Team will be involved in the management of an incident if there is a need to call out the emergency services and/or evacuate one or more buildings. Their responsibilities fall mainly in the first few hours after an incident. Once the incident is stabilised, and once it is established that the staff and anyone else who is affected (e.g. customers and public) are safe, then at that point they will handover the situation to the Incident Management Team.
NIST 800-34 [NIST] states that the specific types of teams required to manage an incident are based on the system affected. The functional teams are described below and some or all of these teams may be needed to effect a Business Continuity response: