CSIRT Frequently Asked Questions (FAQ)

Abstract

A Computer Security Incident Response Team (CSIRT) is a service organization that is responsible for receiving, reviewing, and responding to computer security incident reports and activity. Their services are usually performed for a defined constituency that could be a parent entity such as a corporate, governmental, or educational organization; a region or country; a research network; or a paid client. A CSIRT can be a formalized team or an ad-hoc team. A formalized team performs incident response work as its major job function. An ad-hoc team is called together during an ongoing computer security incident or to respond to an incident when the need arises.

Open PDF

Document Details

Document Type
Technical Report
Publication Date
Mar 18, 2016
Accession Number
AD1147053

Entities

Organizations

  • Carnegie Mellon University

Tags

Communities of Interest

  • Cyber

DTIC Thesaurus Topics

  • Commerce
  • Computer Crime
  • Computers
  • Cybersecurity
  • Emergencies
  • Emergency Response
  • Engineering
  • Governments
  • Guarantees
  • Handbooks
  • Information Security
  • Intrusion Detection
  • Law
  • Organizational Structure
  • Security
  • Software Development
  • Training
  • United States

Readers

  • Astronomy and Astrophysics.
  • Emergency Management and Homeland Security.
  • Government and Public Administration Law.

Technology Areas

  • Cyber