Preparing to defend the homeland in cyber space during a severe cyber incident requires the government to have the capacity to respond to
cybersecurity incidents on its networks and the networks of critical infrastructure operators. As laid out in this article, it seems unlikely that the government will be able to scale its limited DFIR capacity in the near future and will rely on the private sector to provide this capacity.