Building a resilient incident response team requires more than a simple combination of tools and on-call rotations.