A team of professionals known as a Cyber Security Incident Response Team (CSIRT) evaluates, records, and responds to a cyber incident so that a network may not only recover swiftly but also prevent such events. A CSIRT may also be referred to as Computer Incident Response Team (CIRT) or a CIRC (Computer Incident Response Center, Computer Incident Response Capability, or Cyber Incident Response Team).
The CSIRT project is funded by S&T with the goal of assisting CSIRT organizations at all levels of government and the corporate sector to dramatically improve via the creation and implementation of superior incident response and organizational learning methodologies. In particular, S&T will have a manual on how to effectively staff, educate, support, and maintain CSIRTs, which will result in a superior overall capability for responding to cyber incidents.
For information about CSIRT, please view guidance on this topic from:
- the Cybersecurity and Infrastructure Security Agency;
- the National Institute of Standards and Technology;
- the U.S. Department of Homeland Security.