CCNA CyberOps SECOPS – Objective 3.4

Photo by Markus Spiske from Pexels

Describe the goals of the given CSIRT

Implementing Cisco Cybersecurity Operations (210-255)

A Computer Security Incident Response Team (CSIRT) can come in several different forms.

  • Internal CSIRT – an Internal CSIRT is established by an organization to handle incident response for their own organization.
  • National CSIRT – National CSIRTs provide services for a nation and will provide assistance to other CSIRTs
  • Coordination Centers – Coordination Centers help to share incident response information US-CERT is an example.
  • Analysis Centers – synthesis information from various sources to determine trends and patterns
  • Vendor Teams – Vendors often have Product Security IRTs (PSIRT) that analyze and release information about product vulnerabilities
  • Incident Response Providers (MSSP) – Managed Security Service Providers provide IRT to organizations that choose to purchase services instead of having their own team.