During a cyberattack, the incident response team's job is to coordinate the reaction, figure out what happened, stop the threat, get rid of any bad behavior, and get things back to normal. The team also talks to people who have a stake in the situation and keeps them up to date on what's going on.