top of page

Creating a Cyber Security Incident Response Team

Create your Cyber Team 

Cyber security has become one of the top priorities of any business who wants to take advantage of digitisation.

​

The Problem

As your enterprise's digital footprint expands, so does the number of vulnerabilities. More employees, devices, and networks only create a situation where you might overlook certain aspects of security or are not able to protect your data and resources to the best of your ability.

 

The Myth

Most businesses tend to feature heavily on just software systems for their cyber security needs. In reality, you need a team that can make the most of software systems, monitor activities, report unusual incidents, and respond to threats.

 

The Solution

In today's threat-heavy landscape, you need nothing but the best people on your cyber team to combat sophisticated cyber-attacks, fill security gaps, and respond to incidents in a timely fashion.

A Cyber Security Incident Response Team (CSIRT) is your best bet at protecting your enterprise's assets from hackers who work hard and keep coming up with new ways to breach your perimeters.

 

Resources

This course is jammed packed with resources to kick start your Cyber Security Incident Response Team.

This course is a "Learn and Go Do", then come back and do the next step.

As part of the course, staff will develop an action plan that can be used as a starting point in planning and implementing your Cyber Battle Team.

NOTE: This course accrues points towards a Masters in Cyber Security from the Software Engineers Institute

​
 

1.png
2.png

The Cyber Security Incident Response Team (CSIRT) is a key component of an organization's security posture. By definition, a CSIRT is a team of individuals who are responsible for responding to computer security incidents. While the term "computer security incident" can be used to describe any type of event that poses a threat to computer systems or data, in practice, most CSIRTs focus on responding to cyber incidents – that is, events that involve some form of malicious activity carried out using digital means.

A CSIRT assesses threat vulnerabilities and the potential for cyber-attacks.  They also assess the damage caused by an attack and are quickly deployed with pre-planned strategies to mitigate the attack and have the organisation up and running again as quickly as possible.  Their goal is to prevent further attacks from occurring. 

3.png
4.png

Why should I establish a Cyber Security Incident Response Team BEFORE a cyber attack occurs?

Creating a Cyber Security Incident Response Team (CSIRT) is an important step in preparing for a cyber-attack. A CSIRT is a group of people who are trained and prepared to respond to a security incident. The team can provide support during and after an attack, including helping to contain the damage, restore systems, and investigate the incident. Having a CSIRT in place before an attack occurs can help to minimize the impact of the attack and ensure that operations can resume quickly. Furthermore, a CSIRT can help to build trust with customers and other stakeholders by demonstrating that the organization takes security seriously. As such, creating a CSIRT is an important part of preparing for a cyber-attack.

Who should do this course?

  • Current and prospective managers; C-level management such as CEO, CE, CIOs, CSOs, CROs, CTO; and project leaders interested in establishing an effective Cyber Team.

  • Other staff who interact with Cyber/IT staff would like to understand how the team operates. For example, constituents; higher-level management; media relations, legal counsel, law enforcement, human resources, audit, or risk management staff.

Topics

  • Incident management and the relationship to CSIRTs

  • Prerequisites to planning a CSIRT

  • Creating a CSIRT vision

  • CSIRT mission, objectives, and level of authority

  • CSIRT organisational issues and models

  • Range and levels of provided services

  • Funding issues

  • Hiring and training initial CSIRT staff

  • Implementing CSIRT policies and procedures

  • Requirements for a CSIRT infrastructure

  • Implementation and operational issues and strategies

  • Collaboration and communication issues

What your staff will learn?

Your staff will learn to:

  • Understand the requirements for establishing an effective Cyber Team (CSIRT)

  • Strategically plan the development and implementation of a new Cyber Team. 

  • Highlight issues associated with assembling a responsive, effective team of computer security professionals

  • Identify policies and procedures that should be established and implemented.

  • Understand various organisational models for a new Cyber Team

  • Understand the variety and level of services that a Cyber Team can provide

bottom of page