This document presents a list of computer security incident response team (CSIRT) services and their definitions. This list provides a common framework for a consistent and comparable description of CSIRTs and their corresponding services.
In these reports and papers, the authors describe case studies related to the insider threat. One effective way for computer security incident response teams or other types of incident management functions to get started and to improve their performance is to read about what other similar teams have done. From time to time, the CSIRT Development and Training team publishes case studies of national information security teams to assist in this process.
Establishing a National Computer Security Incident Response Team (CSIRT)
In this podcast, John Haller and Jeff Carpenter discuss how a national CSIRT is essential for protecting national and economic security.
Tackling Security at the National Level: A Resource for Leaders
In this podcast, Jeff Carpenter describes how business leaders can use national CSIRTs as a key resource when dealing with incidents that have national or worldwide scope.
Handbook for Computer Security Incident Response Teams (CSIRTs)
In this 2003 handbook, the authors describe different organizational models for implementing incident handling capabilities.
Creating a Computer Security Incident Response Team: A Process for Getting Started
This resource outlines best practices, guidance, and processes for creating a CSIRT.
Action List for Developing a Computer Security Incident Response Team (CSIRT)
This document provides a high-level overview of the actions to take and topics to address when planning and implementing a CSIRT.
Best Practices for National Cyber Security: Building a National Computer Security Incident Management Capability (Version 2.0)
In this 2011 report, the authors provide insight that interested organizations and governments can use to develop a national incident management capability.
Steps for Creating National CSIRTs
In this 2004 paper, the authors describe CSIRTs, the problems and challenges they face, and the benefits of developing a response capability at a national level.