CSIRT Requirements for Situational Awareness
Abstract
The term situational awareness comes from the field of aviation. It describes the process of evaluating all the different environmental data around you and using it to make decisions. In the area of computer security, it refers to collecting the information around you, understanding how the information relates to and impacts your organization or constituency, and then, at the highest level, using this information to predict future activity. Situational awareness provides a context for decision making and specifically the context within which organizations prevent, detect, and respond to computer security threats and risks.
Document Details
- Document Type
- Technical Report
- Publication Date
- Jan 25, 2014
- Accession Number
- ADA596848
Entities
People
- M. Murray
- Robin M. Ruefle
Organizations
- Carnegie Mellon University