Handbook for computer security incident response teams shirts

In addition, operational and technical issues are covered, such as equipment, security, and staffing considerations. This document is intended to provide a valuable resource to both newly forming teams and existing teams whose services, policies, and procedures are not clearly defined or documented.

The primary audience for this document is managers who are responsible for the creation or operation of a CSIRT or an incident handling service. View the full text of this report. Accession Number: ADA In this handbook, the authors describe different organizational models for implementing incident handling capabilities.

This document provides guidance on forming and operating a computer security incident response team CSIRT. In particular, it helps an organization to define and document the nature and scope of a computer security incident handling service, which is the core service of a CSIRT. The document explains the functions that make up the service; how those functions interrelate; and the tools, procedures, and roles necessary to implement the service.

This document also describes how CSIRTs interact with other organizations and how to handle sensitive information.