Question

How would you build a CSIRT? What are the components to building an effective team?

DQ requirement: Note that the requirement is to post your initial response no later than Thursday and you must post one additional post during the week. I recommend your initial posting to be between 200-to-300 words. The replies to fellow students and to the professor should range between 100-to-150 words. All initial posts must contain a properly formatted in-text citation and scholarly reference.

Answer 1

Computer security incident response team collects information related to any incidents for any big or small organization . It makes reports within a defined constituency . I will constitute a CSIRT in which people from specialized domains like computer technology , legal protection, cyber security, forensic experts , top management etc. will be given prference. I will follow any legal purview in this connection .

Components:

1) A motivated team leader : A good leader will always motivate and inspire their CSIRT team members to be in focus to meet any challenges.

2) Technological capabilities in field of computer technology and safety measures:

A good CSIRT team will have people for meeting any contingency which has pure technological nature or to prevent that good experts will be present in CSIRT.

3) Proper training and development:

A CSIRT team must be given top priority in continuously updating their skills to meet any unknown incidents.  

4) Mock drills for meeting any real incidents:

If , members of CSIRT team will be involved in mock drills then they will be sure in a position to meet any critical incidents at workplace.