What would an incident response team look like for a smaller organization as opposed to larger one? How can one identify whether or not they have the resources to internally create a response team, or decide that they need to outsource it