Loading...

Messages

Proposals

Stuck in your homework and missing deadline? Get urgent help in $10/Page with 24 hours deadline

Get Urgent Writing Help In Your Essays, Assignments, Homeworks, Dissertation, Thesis Or Coursework & Achieve A+ Grades.

Privacy Guaranteed - 100% Plagiarism Free Writing - Free Turnitin Report - Professional And Experienced Writers - 24/7 Online Support

Discuss ways organizations have built a csirt

26/12/2020 Client: saad24vbs Deadline: 7 Days

Module 6 Discussion Forum

Include at least 250 words in your posting and at least 250 words in your reply. Indicate at least one source or reference in your original post. Please see syllabus for details on submission requirements.


Module 6 Discussion Question

Search "scholar.google.com" or your textbook. Include at least 250 words in your reply. Indicate at least one source or reference in your original post. Discuss ways organizations have built a CSIRT. What are the components to building an effective and successful CSIRT team?




Reply-1(Vindhya)






In the building, an effective and successful CSIRT the steps involved are as follows:


1. Buy-In and support of management are obtained: the creation of an effective incident response team becomes problematic and difficult without the support of the management. The support includes time, funding, and provision of resources to the team (D. Penedo, 2006). The important responsibility and function of the CSIRTs are obtaining managements perceptions and expectations.


2. The strategic plan of CSIRT development is determined: by dealing with the administrative issues and addressing the project management issues the development of CSIRT is to be managed.


3. Relevant information is gathered: the service needs of the organization and to determine the incident response the information is gathered. In gathering the information the resources available are inventories of assets and critical system, for enterprise the organization charts and functions of specific business, networks, and systems organizational topologies, plans of business-continuity or existing disaster recovery, the physical security breach of organization is notified by existing guidelines, existing plans of incident-management, regulations of institution or parental, and existing security policies and procedures.


4. CSIRT vision is designed: The key components of the CSIRT are identified by bringing the gathered information to incident response constituency needs. For creating, CSIRT vision the points to be followed are (Z. Yunos, 2016): Constituency identification, the goals, objectives, and mission of CSIRT are defined, CSIRT services are selected and provided to the constituency, the organizational model is determined, required resources are identified, and CSIRT funding is determined.


5. The vision of CSIRT is communicated: the operational plan and vision are communicated to constituency, management, and others involved in the operation and feedbacks are obtained. Communicating vision before implementation helps in identification of problems.


6. CSIRT implementation begins: the steps involved in implementation are the CSIRT staff is hired and trained, in supporting team the necessary infrastructure is built and equipment are bought, the initial set of CSIRT procedures and policies are developed, the specifications of incident-tracking system are defined and the forms and guidelines of incident-reporting are developed for a constituency.


7. CSIRT announcement: broadly announce to constituency when CSIRT is operational also include the operation hours and contact information.


8. The effectiveness of CSIRT is evaluated: information on effectiveness is gathered by including against other CSIRTs the benchmark, with constituency representatives the general discussions involved, on a periodic basis the surveys of evaluation are distributed to members of the constituency, and in evaluating the team the quality parameters or set of criteria created by an audit.


References:


D. Penedo (2006), Optimal Policy for Software Vulnerability Disclosure. Good practice guide for CERTs in the area of Industrial Control Systems - Computer Emergency Response Capabilities considerations for ICS.


Z. Yunos (2016), Creating and Managing Computer Security Incident Handling Teams (CSIRTs), CERT Training and Education Networked Systems Survivability Software Engineering Institute Carnegie Mellon University.




Reply-2 ( Glad)






CSIRT (Computer Security Incident Response Team) is a team within an organization which responds to threats or incidents as they occur within the organization. Their responsibilities include,


- Maintaining and creating an incident response plan


- Identifying, troubleshoot and remediation of any incidents


- Communication methods for incident responses


- Combing the organization and proactively identifying and physical or network security threats.


- Recommending technologies, policy updates, governance updates based off the past threats


Keeping in mind the roles and responsibilities of this team, to build a team to perform these activities and own the responsibilities, the first step towards creating this team would be to buy management support to ensure they are in agreement with the creation of such a team and are on board to sign off on the resource allocation and budget as well as procedural aspects of building a CSIRT team.


The next step would be to create a strategic development plan on the various facets the team should possess and within which time frame team should be formed. The plan should be feasible and the timelines realistic and also care has to be taken to ensure the plan aligns with overall objectives of the organization.


After the strategic plan is developed, information should be gathered to ensure all aspects of the CSIRT team is covered based on the types of policies formulated, types of threats assessed and the services that are to be offered. The team will have to be picked based on the information at this stage.


Once the team is aligned and the vision is set, the vision of this team and its operations will have to be communicated within the organization to bring about an awareness on what this team could do.


Post the organizational wide announcement and policy implementation, the team goes live into operations and implements all the guidelines and procedures thereby serving the organization.


References:


Fuertes, W., Reyes, F., Valladares, P., Tapia, F., Toulkeridis, T., & Pérez, E. (2017). An Integral Model to Provide Reactive and Proactive Services in an Academic CSIRT Based on Business Intelligence. Systems, 5(4), 52. doi: 10.3390/systems5040052


Möller, K. (2007). Setting up a Grid‐CERT: experiences of an academic CSIRT. Campus-Wide Information Systems, 24(4), 260-270. doi: 10.1108/10650740710834644



Homework is Completed By:

Writer Writer Name Amount Client Comments & Rating
Instant Homework Helper

ONLINE

Instant Homework Helper

$36

She helped me in last minute in a very reasonable price. She is a lifesaver, I got A+ grade in my homework, I will surely hire her again for my next assignments, Thumbs Up!

Order & Get This Solution Within 3 Hours in $25/Page

Custom Original Solution And Get A+ Grades

  • 100% Plagiarism Free
  • Proper APA/MLA/Harvard Referencing
  • Delivery in 3 Hours After Placing Order
  • Free Turnitin Report
  • Unlimited Revisions
  • Privacy Guaranteed

Order & Get This Solution Within 6 Hours in $20/Page

Custom Original Solution And Get A+ Grades

  • 100% Plagiarism Free
  • Proper APA/MLA/Harvard Referencing
  • Delivery in 6 Hours After Placing Order
  • Free Turnitin Report
  • Unlimited Revisions
  • Privacy Guaranteed

Order & Get This Solution Within 12 Hours in $15/Page

Custom Original Solution And Get A+ Grades

  • 100% Plagiarism Free
  • Proper APA/MLA/Harvard Referencing
  • Delivery in 12 Hours After Placing Order
  • Free Turnitin Report
  • Unlimited Revisions
  • Privacy Guaranteed

6 writers have sent their proposals to do this homework:

Peter O.
University Coursework Help
Homework Guru
Top Essay Tutor
Helping Hand
Writer Writer Name Offer Chat
Peter O.

ONLINE

Peter O.

Hello, I can assist you in writing attractive and compelling content on ganja and its movement globally. I will provide with valuable, informative content that you will appreciate. The content will surely hit your target audience. I will provide you with the work that will be according to the needs of the targeted audience and Google’s requirement.

$105 Chat With Writer
University Coursework Help

ONLINE

University Coursework Help

Hi dear, I am ready to do your homework in a reasonable price.

$112 Chat With Writer
Homework Guru

ONLINE

Homework Guru

Hi dear, I am ready to do your homework in a reasonable price and in a timely manner.

$112 Chat With Writer
Top Essay Tutor

ONLINE

Top Essay Tutor

I have more than 12 years of experience in managing online classes, exams, and quizzes on different websites like; Connect, McGraw-Hill, and Blackboard. I always provide a guarantee to my clients for their grades.

$115 Chat With Writer
Helping Hand

ONLINE

Helping Hand

I am an Academic writer with 10 years of experience. As an Academic writer, my aim is to generate unique content without Plagiarism as per the client’s requirements.

$110 Chat With Writer

Let our expert academic writers to help you in achieving a+ grades in your homework, assignment, quiz or exam.

Similar Homework Questions

Yo salí de casa a las 8:00. antes de salir de casa miré mi correo electrónico. - Marketing the core 8th edition pdf free - Suppose you want to quickly perform a customer marketing survey - Polmont park medical group - Romeo and juliet short answer questions - An answer to the question what is enlightenment - Microsoft Excel Assignment 2 - Principles of incident response and disaster recovery - Mole fraction calculator gas - Ammonia lewis dot structure - Linked and convergent premises - Law test - The acronym radar stands for business ethics - Consider a cm thick large concrete plane wall - Rural villages in delhi - Week 1 Managed Care Project - TEST POST QUESTION FROM ADMIN2 - Cases in operations management pdf - Ap chem score calculator - Gpib usb hpib usb controller - WEEK5-DISCUSSION-Enterprise Risk Management - Paraphrase - Berganza last name origin - Det mandatory reporting module - ASSIGNMENT 04 - Elementary Statistics Test - Field Experience - A guide to clinical practice abdomen and superficial structures - Final report 7 pages due by 24 hours - Needs help - Otitis media soap note example - Discussion Question - Proportional parts of parallel lines - The shack character analysis - Exxonmobil business strategy - Coldfusion 11 update 11 - Institutional racism - Silver nitrate reacts with barium chloride - LONG TERM RESIDENTIAL TOPIC - What is 1 decimal place - Modern family a fair to remember harold grossman - What are the disadvantages of buying a franchise comparing to setting up a new business ? - Gamescape week 2 answers - When does egocentrism end - Flow through venturimeter lab report - Organizational behaviour and human relations ppt - Bus 475 week 2 individual assignment - What was an underlying cause of the great depression - Buffalo wild wings swot - Is 210 a prime number - How to calculate par levels - English file advanced answer key - Construction of dc machine - A paper size chart - Contouring is a very dangerous game - Mark twain the lowest animal analysis - Math 533 project part b - What is an opposite integer - Passcode for windy city smokeout - Aasb 112 tax effect accounting - Session persistence in websphere application server - Lisa brocklebank - Nonviolent communication a language of life book - Paper - Saudi arabian cultural mission - Fort st high school petersham - Experiment 4 paper chromatography answers - Introduction to christian ethics crook - Which one of the following pieces of writing - An eminent aerospace engineer into the wild - Wgu professional portfolio nursing - Chief complaint nursing care plan - A scholarly source has which of following attributes - Westfield outdoors windshield pro - Monument 14 savage drift summary - National centre for vocational education research - Statistical symbols and definitions matching assignment - Statistic - What is author bias - How to find molar extinction coefficient from graph - A light year is defined as - Gc ms training courses - Hhmi great transitions interactive - Wisdom sits in places chapter 4 summary - Human Resource - Japan - Even though most corporate bonds in the united states make coupon payments semiannually - Zeek the geek online - Impington village sports centre - IISP DISCUSSION-5-dumm - I need 750 words in Pantastic Pizza in business law assignment - Forum 3 - CLA 2 PPT - Presentation for the Business Research Proposal - Does capacity only measure liquid - End of month posting perdisco - An object's inertia is its tendency to maintain a constant: - Overlord apartments seneca falls ny - Premier boarding kennels corley - The man who invented management - Limitations of efficient market hypothesis theory