The on-duty or on-call member of the CSIRT responsible for reviewing adverse events and determining whether an actual incident is ongoing and whether the CSIRT should be activated.