CERT
 
Publications Catalog Historical Documents Authorized Users of "CERT" CERT Training Courses Incident Handling Certification Virtual Training Environment CERT Coordination Center CERT Contact Information CERT Statistics FIRST conference 2008 sponsor
 

CSIRT Development

Organizations must respond quickly and effectively to computer security incidents. Timely and effective response can limit damage and lessen recovery costs. Establishing a computer security incident response team (CSIRT) is a great way to provide this rapid response capability and help prevent future incidents.

The CERT CSIRT Development Team

  • helps organizations build a CSIRT incident management capability and adopt performance standards
  • develops incident management best practices, tools, and methods
  • provides training, publishes reports, conducts workshops, and works with strategic customers to improve the effectiveness of the CSIRT community

The team has introduced a method to evaluate and improve incident management capabilities. For detailed information, see the technical report Incident Management Capability Metrics.

The team has also recently introduced a method to determine the potential for success of an organization's incident management capabilities. For detailed information, see the technical report Incident Management Mission Diagnostic Method.

CSIRT Courses

Need to create a CSIRT?
Creating a Computer Security Incident Response Team
May 6, 2008 (Pittsburgh, PA)

For CSIRT Managers
Managing Computer Security Incident Response Teams
May 7 - 9, 2008 (Pittsburgh, PA)

For New Incident Handlers
Fundamentals of Incident Handling
April 14 - 18, 2008 (CMU/CIC Bldg. Pittsburgh, PA)

For Experienced Incident Handlers
Advanced Incident Handling for Technical Staff
May 19 - 23, 2008 (CMU/CIC Bldg. Pittsburgh, PA)

CSIRTs Around the World

CSIRTs map This map identifies locations of teams who have an established relationship with the CERT/CC and/or are members of FIRST.


Last updated April 1, 2008