This is a compilation of their answers. Each incident response team can assist their constituency and coordinate with other teams to provide efficient global response. The annual conference , which is the only event that focuses on incident response.
Education is provided through tutorials, presentations and team to team interactions.
The mailing lists provide an opportunity for us to share information about exploits, threats, tools and techniques in a secure and restricted forum. Finally, new teams and groups that are interested in forming teams can obviously benefit greatly from the experience of existing teams. Meeting people from experienced incident response teams helps us build contacts that we can refer to when we run into unfamiliar problems. Through the presentations and our conversations at the conferences, or discussions on the first-teams mailing list, we learn about other teams. When we need help, we can refer to those people for assistance.