I work as team lead of the IT Security team where I work. Today we had a security incident (verified via tripped canary tokens / observed IOCs) and I had to coordinate all hands on deck meeting with the team with little notice.
It has been my experience that incident response activities such as reviewing audit logs, reviewing system configurations, and restoring systems work best when team members are able to see and interact with each other, whether physically or via video enabled teleconferencing. Voice communication only just does not work well, as all participants being able to see what is being investigated (e.g: Audit logs or machine registry entries) is critical. Communication is also more easily distorted when the visual piece is missing.
However, several team members have less than optimal internet connection bandwidth at home, making video conferencing in real time difficult. For example, just today the connection often cut out. Due to Covid 19 pandemic, entire company is being required to work from home and I anticipate this to continue for the foreseeable near future.
During a fluid situation such as this, how can I better coordinate response when technology outside of the company control is constraining my work?