d6 reply
The formation of computer security information response teams by businesses need immediate action and it is highly suggested approach for dealing with the issues around the system vulnerabilities and incident. There are many ways to creating a team by assembling internal staff members for various roles and outsourcing the team members to be call for CSIRT team. However, the common problem for many companies that follow with the theoretical worst-case incident that train a team based on the sort of incident happen. Another way on focusing on CSIRT team is to treat an entire company as an CSIRT team and train and educate all the staff and employees on how to handle emergency. To maximize the viability of the team few members can respond in a short amount of the time.
Educating team members on the time of emergency events and how to respond accordingly are the main components of the building an effective and successful CSIRT team. To put the CSIRT team in the operation we need a CSIRT team deploy and handle the situations, implement plan to get started moment notice. There are the most crucial steps and overall efforts to create CSIRT team. In the creation of CSIRT team education and planning stages can take months to gather resources and create documentation on the possible incident situations. It also includes how to educate their staff and team on such efforts. During the time of assembling of CSIRT team, they require to plan and prepare them for variety of possible disaster situations. Due to this they can become more effective in the time of disaster comes.
References:
Husmann, D. (2004). Global Information Assurance Certification Paper. End Users: Assets or Liabilities When Handling a Cyber Incident?1(4b), 1-20. Retrieved March 20, 2019, from: https://www.giac.org/paper/gsec/3783/users-assets-liabilities-handling-cyber-incident/106090.
Creating and Managing Computer Security Incident Response Teams. (1988, November). Retrieved March 20, 2019, from: https://www.apricot.net/apricot2004/doc/cd_content/23rd%20February%202004/06%20-%20MTF%20-%20Creating%20and%20Managing%20CSIRTS%20-%20Mark%20Zajicek/Creating-and-Managing-CSIRTs-notes.pdf
