Finding the right technical resources to staff an incident response team is always a challenge. Typically, an incident manager will be chosen to bring together a number of team members, based on the scope of the incident and the response required.

It is crucial to keep a cadre of staff well trained in incident response, and ready to assist as necessary when an incident does occur. The incident manager must be fully versed in local IR procedures, as well as the cloud provider's SLAs.

Proper planning up-front will enable the right pairing of staff with the specifically required roles needed for each incident. Teams responding to IoT-related incidents will need to include some unique skill sets driven by the specific IoT implementations and deployment use cases involved.

In addition, staff need to have a deep understanding of the underlying business purpose of the compromised IoT system. Keep an emergency Point Of Contact (POC) list for each type of incident within your organization.