Incident responders investigate and analyze responses to cyber incidents and are prepared to maintain incident tracking information, plan recovery activities and examine evidence related to an event. Incident responders have earned their IAT Level I, Level II or Level III certification and typically have at least 5 years of experience in computer network defense or a related field.