Loading...

Messages

Proposals

Stuck in your homework and missing deadline? Get urgent help in $10/Page with 24 hours deadline

Get Urgent Writing Help In Your Essays, Assignments, Homeworks, Dissertation, Thesis Or Coursework & Achieve A+ Grades.

Privacy Guaranteed - 100% Plagiarism Free Writing - Free Turnitin Report - Professional And Experienced Writers - 24/7 Online Support

Csirt team roles and responsibilities

04/12/2021 Client: muhammad11 Deadline: 2 Day

Module 6 Discussion Forum
Include at least 250 words in your posting and at least 250 words in your reply. Indicate at least one source or reference in your original post. Please see syllabus for details on submission requirements.

Module 6 Discussion Question
Search "scholar.google.com" or your textbook. Include at least 250 words in your reply. Indicate at least one source or reference in your original post. Discuss ways organizations have built a CSIRT. What are the components to building an effective and successful CSIRT team?

Reply-1(Vindhya)

In the building, an effective and successful CSIRT the steps involved are as follows:

1. Buy-In and support of management are obtained: the creation of an effective incident response team becomes problematic and difficult without the support of the management. The support includes time, funding, and provision of resources to the team (D. Penedo, 2006). The important responsibility and function of the CSIRTs are obtaining managements perceptions and expectations.

2. The strategic plan of CSIRT development is determined: by dealing with the administrative issues and addressing the project management issues the development of CSIRT is to be managed.

3. Relevant information is gathered: the service needs of the organization and to determine the incident response the information is gathered. In gathering the information the resources available are inventories of assets and critical system, for enterprise the organization charts and functions of specific business, networks, and systems organizational topologies, plans of business-continuity or existing disaster recovery, the physical security breach of organization is notified by existing guidelines, existing plans of incident-management, regulations of institution or parental, and existing security policies and procedures.

4. CSIRT vision is designed: The key components of the CSIRT are identified by bringing the gathered information to incident response constituency needs. For creating, CSIRT vision the points to be followed are (Z. Yunos, 2016): Constituency identification, the goals, objectives, and mission of CSIRT are defined, CSIRT services are selected and provided to the constituency, the organizational model is determined, required resources are identified, and CSIRT funding is determined.

5. The vision of CSIRT is communicated: the operational plan and vision are communicated to constituency, management, and others involved in the operation and feedbacks are obtained. Communicating vision before implementation helps in identification of problems.

6. CSIRT implementation begins: the steps involved in implementation are the CSIRT staff is hired and trained, in supporting team the necessary infrastructure is built and equipment are bought, the initial set of CSIRT procedures and policies are developed, the specifications of incident-tracking system are defined and the forms and guidelines of incident-reporting are developed for a constituency.

7. CSIRT announcement: broadly announce to constituency when CSIRT is operational also include the operation hours and contact information.

8. The effectiveness of CSIRT is evaluated: information on effectiveness is gathered by including against other CSIRTs the benchmark, with constituency representatives the general discussions involved, on a periodic basis the surveys of evaluation are distributed to members of the constituency, and in evaluating the team the quality parameters or set of criteria created by an audit.

References:

D. Penedo (2006), Optimal Policy for Software Vulnerability Disclosure. Good practice guide for CERTs in the area of Industrial Control Systems - Computer Emergency Response Capabilities considerations for ICS.

Z. Yunos (2016), Creating and Managing Computer Security Incident Handling Teams (CSIRTs), CERT Training and Education Networked Systems Survivability Software Engineering Institute Carnegie Mellon University.

Reply-2 ( Glad)

CSIRT (Computer Security Incident Response Team) is a team within an organization which responds to threats or incidents as they occur within the organization. Their responsibilities include,

- Maintaining and creating an incident response plan

- Identifying, troubleshoot and remediation of any incidents

- Communication methods for incident responses

- Combing the organization and proactively identifying and physical or network security threats.

- Recommending technologies, policy updates, governance updates based off the past threats

Keeping in mind the roles and responsibilities of this team, to build a team to perform these activities and own the responsibilities, the first step towards creating this team would be to buy management support to ensure they are in agreement with the creation of such a team and are on board to sign off on the resource allocation and budget as well as procedural aspects of building a CSIRT team.

The next step would be to create a strategic development plan on the various facets the team should possess and within which time frame team should be formed. The plan should be feasible and the timelines realistic and also care has to be taken to ensure the plan aligns with overall objectives of the organization.

After the strategic plan is developed, information should be gathered to ensure all aspects of the CSIRT team is covered based on the types of policies formulated, types of threats assessed and the services that are to be offered. The team will have to be picked based on the information at this stage.

Once the team is aligned and the vision is set, the vision of this team and its operations will have to be communicated within the organization to bring about an awareness on what this team could do.

Post the organizational wide announcement and policy implementation, the team goes live into operations and implements all the guidelines and procedures thereby serving the organization.

References:

Fuertes, W., Reyes, F., Valladares, P., Tapia, F., Toulkeridis, T., & Pérez, E. (2017). An Integral Model to Provide Reactive and Proactive Services in an Academic CSIRT Based on Business Intelligence. Systems, 5(4), 52. doi: 10.3390/systems5040052

Möller, K. (2007). Setting up a Grid‐CERT: experiences of an academic CSIRT. Campus-Wide Information Systems, 24(4), 260-270. doi: 10.1108/10650740710834644

Homework is Completed By:

Writer Writer Name Amount Client Comments & Rating
Instant Homework Helper

ONLINE

Instant Homework Helper

$36

She helped me in last minute in a very reasonable price. She is a lifesaver, I got A+ grade in my homework, I will surely hire her again for my next assignments, Thumbs Up!

Order & Get This Solution Within 3 Hours in $25/Page

Custom Original Solution And Get A+ Grades

  • 100% Plagiarism Free
  • Proper APA/MLA/Harvard Referencing
  • Delivery in 3 Hours After Placing Order
  • Free Turnitin Report
  • Unlimited Revisions
  • Privacy Guaranteed

Order & Get This Solution Within 6 Hours in $20/Page

Custom Original Solution And Get A+ Grades

  • 100% Plagiarism Free
  • Proper APA/MLA/Harvard Referencing
  • Delivery in 6 Hours After Placing Order
  • Free Turnitin Report
  • Unlimited Revisions
  • Privacy Guaranteed

Order & Get This Solution Within 12 Hours in $15/Page

Custom Original Solution And Get A+ Grades

  • 100% Plagiarism Free
  • Proper APA/MLA/Harvard Referencing
  • Delivery in 12 Hours After Placing Order
  • Free Turnitin Report
  • Unlimited Revisions
  • Privacy Guaranteed

6 writers have sent their proposals to do this homework:

Professional Accountant
Calculation Guru
Math Guru
Assignments Hut
Coursework Helper
Assignment Guru
Writer Writer Name Offer Chat
Professional Accountant

ONLINE

Professional Accountant

I have assisted scholars, business persons, startups, entrepreneurs, marketers, managers etc in their, pitches, presentations, market research, business plans etc.

$31 Chat With Writer
Calculation Guru

ONLINE

Calculation Guru

Being a Ph.D. in the Business field, I have been doing academic writing for the past 7 years and have a good command over writing research papers, essay, dissertations and all kinds of academic writing and proofreading.

$17 Chat With Writer
Math Guru

ONLINE

Math Guru

I will be delighted to work on your project. As an experienced writer, I can provide you top quality, well researched, concise and error-free work within your provided deadline at very reasonable prices.

$43 Chat With Writer
Assignments Hut

ONLINE

Assignments Hut

As an experienced writer, I have extensive experience in business writing, report writing, business profile writing, writing business reports and business plans for my clients.

$22 Chat With Writer
Coursework Helper

ONLINE

Coursework Helper

I am an experienced researcher here with master education. After reading your posting, I feel, you need an expert research writer to complete your project.Thank You

$47 Chat With Writer
Assignment Guru

ONLINE

Assignment Guru

I will be delighted to work on your project. As an experienced writer, I can provide you top quality, well researched, concise and error-free work within your provided deadline at very reasonable prices.

$16 Chat With Writer

Let our expert academic writers to help you in achieving a+ grades in your homework, assignment, quiz or exam.

Similar Homework Questions

Assignment - Introduction to java programming and data structures 11th edition - Religious study, reflection paper3 - Ngai tahu family tree - Core questions in philosophy elliott sober free pdf - Need this by tomorrow september 15th. details will be posted - What is interpersonal learning - Pepsico diversification strategy - 2528 laughlin ave la crescenta ca 91214 - What is wasted energy - Data Finance - Ops 571 week 5 individual assignment operations forecasting - Writing Assignment Instructions - 01023 order for non nms security - Are slime molds heterotrophic or autotrophic - Paula develops a new espresso machine - Growing pains the wrath of con ed - 2 classes needing help - Essays guru only - Amoeba sisters video recap alleles and genes key - Bbc radio kent ebbsfleet - Describing a person essay my mother - Is a burette accurate or precise - Lighter 80 fill color excel - LEGALIZATION OF DRUGS - Harper group pty ltd - North walsham infant school - Webster city daily freeman journal - Centrelink unreasonable to live at home over 18 - Punchline algebra book b 14.4 answers - Module 01 Assignment - Disruptive innovation netflix - The great gatsby chapter 4 short summary - MBA - Main - Activity 8 - Skinpen by bellus medical for sale - Fiscal planning in nursing management and leadership - Psychology statistics questions and answers - Mq uni exam timetable 2021 - Potter and perry fundamentals of nursing 9th edition apa citation - 26 electrons 29 neutrons 26 protons - Isbn 978 0 07 802944 9 - Explain two goals of politicians when they gerrymander during redistricting - Describing words for music - Bramhall park medical practice - Technology - Write a essay - Vcat vic gov au renting notice - Learning is defined as - Http www creativebloq com infographic tools 2131971 - Iacra student pilot application - Accounting for extractive industries journal entries - Ansi asq z1 4 2013 - City of birmingham school - Denan kemp net worth - How to find kinetic energy with height and mass - Good business writers maintain a listener centered approach - Bill nye the science guy digestion worksheet answers - Business law answers to questions and case problems - Opengeology org textbook - Discussion 2 - Inequalities in America - How to calculate gross potential rent - Counting sigma and pi bonds practice problems - Avocado trees per hectare - Liberty turabian - Perform the gram-schmidt process on the following sequence of vectors - The Role of the RN/APRN in Policy-Making - Activity based costing treats organization sustaining costs as - John r schermerhorn jr management pdf - The big risk of employing an outsourcing strategy is - Functional areas for nursing informatics - Notice of marriage swansea - Bull alley theatre training company - Rosemarie rizzo parse human becoming theory - Brandt v boston scientific corporation - Brief summary - Describe how the confidentiality policy is monitored in childcare - 48 shades of brown teaching resources - Www kidsastronomy com solar system htm - Weather map assignment - Klip lok roofing installation - Waren sports supply bank reconciliation 2017 - Mg oh 2 h2so3 - The bont ella j lyrics - OMM622 WEEK 6 DISCUSSIONS 1&2 - Psyc325 unit 3 discussion board - Treatment goals should be included in the discharge summary - Discussion 3.2: Is It Relevant? - Describe the four emerging forms of critical criminology - Next please analysis - Causes of food spoilage - WRK100 SKILL DEVELOPMENT PLAN - Community Health - 6-1 Project 2: Historical Context and Introduction Submission - Application of differential calculus in daily activities - Smtp 500 line too long - Good samaritan act qld - Discussion Board - Module 05 Lab 01 - Solar Power - Ecce romani ii chapter 35 translation