Coordination — SOC, NOC, legal, regulators

The Multi-Stakeholder IR Team

A telecom IR incident involves multiple teams beyond what enterprise IT typically encounters. SOC: detection, containment, eradication, forensics — the core security work. NOC (Network Operations Center): manages the live network; coordinates service impact of containment actions; communicates with field engineering. Lawful intercept team: handles LI systems and related sensitivities; coordinates with law enforcement when LI is involved. Regulatory affairs: tracks regulatory reporting requirements and timelines; coordinates with regulators. Legal counsel: advises on legal implications,…