Incident Management: CSIRT Development
We help organizations and national CSIRTs develop, operate, and improve incident management capabilities. The following key resources are available for the global CSIRT community:
- Creating a CSIRT: Getting Started
- Operating and Staffing Your CSIRT
- Developing Incident Handling Cost Models
- Collecting Evidence/Forensics
- Incident Management and General CSIRT Publications
One effective way for computer security incident response teams or other types of incident management functions to get started and to improve their performance is to read about what other similar teams have done. From time to time, we publish case studies of national information security teams to assist in this process. CSIRTs can get started and improve their performance by reading about what other similar teams have done in similar situations.
Contact us if you have questions about developing a CSIRT or if you need additional information about our work with CSIRTs.
Learn How to Create a CSIRT
Creating a Computer Security Incident Response Team is a one-day course that describes the key issues and decisions that managers and project leaders must address when establishing a CSIRT.
Become an Authorized User of "CERT"
CSIRTs may apply for authorization to use the "CERT" mark in their names.