Developing a Community Cyber Security Incident Response Capability

Much has been written on cyber incident response and there are many documents that address the process an organization should follow in the event of a cyber attack or incident. What is not addressed, however, is what the response process should be in the event of a cyber attack on a community. Community leaders do not have direct control or authority over the many disparate organizations within a community but may reasonably be expected to direct the response to such an attack. This paper addresses this issue and makes various recommendations for what communities can do in preparing for a community response to a cyber attack or incident.