Who owns Communication in Network vs. Security Incidents? Best Practices & RACI Guidance Needed In many organizations, Network and Security teams both play a role in incident response, especially when firewall or SASE issues impact network performance. When an issue is first diagnosed by the Network team but determined to be security-related, who should own the ongoing communication, resolution updates, and root cause reporting? I’d love to hear from the community: • Are there best practices, ITIL/ITSM frameworks, or RACI models that clarify ownership? • How does your organization handle communication handoffs between Network and Security teams?
Agree or disagree: Business unit leaders typically oppose the SOC’s recommendations.
Strongly disagree2%
Agree65%
Neutral18%
Disagree13%
Strongly agree
View Results
As I evolved my technology career, I relied on many models like ITIL, OSI, NIST, PMBOK, etc. What are the new models that better reflect the new ways of working? Does anyone still use any of the models I mentioned? What do you all think I should learn more about in this regard?
