A good article for those who want to run IR team or SOC. For my reference.
1. http://eatingsecurity.blogspot.com/2009/04/building-ir-team-people.html
2. http://eatingsecurity.blogspot.com/2009/06/building-ir-team-organization.html
3. http://eatingsecurity.blogspot.com/2009/07/building-ir-team-documentation.html
Been there and done that too.
:)
