Computer Security Incident Response Team (CSIRT)

Content Leader: Jess Garcia - Last Updated: December 11, 2006

Creating a CSIRT

If you are in the process of creating or you are operating a CSIRT, these are some useful references you can use:

• A good starting point is the NIST publication about IR:
  • Establishing a Computer Security Incident Response Capability (CSIRC)

• Some other useful references are:

• ENISA
  • A Step-by-Step Approach on How to Set Up a CSIRT
• CERT CC
  • CSIRT Development
  • Creating a Computer Security Incident Response Team
  • Creating a Computer Security Incident Response Team: A Process for Getting Started
• Federal Government Incident Response Team (IRT)

CSIRT-related resources

• Books

• ENISA
  • Inventory of CERT Activities in Europe