IBM X-Force Incident Response and Intelligence Services (IRIS) offers teams to clients whove had a security incident. IBM: Buy or build an IR and digital forensics team boils down to two questions. Building an IR team and equipping the team with the necessary tools and infrastructure could be more expensive than contacting third parties from third parties. Building IR teams can be built to match what a company really wants or needs, which requires legal advice, a larger team and a lab.”]
Source: https://securityintelligence.com/incident-response-and-digital-forensics-will-you-buy-or-build/