To identify the different roles that will act during the incident response process. This includes the different functions they will perform in the case of an incident happening.