Improving Cybersecurity Incident Response Team (CSIRT) Skills, Dynamics and Effectiveness
Abstract
By analyzing documentation, observing actual CSIRT activity, convening focus groups, and using pre- and post-incident interviews, a team from Dartmouth College, George Mason University and Hewlett-Packard recommended ways to improve the skills, dynamics and effectiveness of CSIRTs. The results include descriptions of needed knowledge, skills and abilities for key CSIRT roles, viewed from individual, team and multi-team system perspectives, as well as simulation-derived recommendations for optimal CSIRT performance.
Document Details
- Document Type
- Technical Report
- Publication Date
- Mar 01, 2017
- Accession Number
- AD1027871
Entities
People
- Shari L. Pfleeger