In addition to conducting extensive research, the CSIRT development team offers a variety of products and services to its constituency.

Products

• a suite of public incident management and CSIRT training courses
• publications and resources for creating and operating incident management and CSIRT capabilities
• Incident Management Capability Metrics Version 0.1 (pdf)
• Incident Management Mission Diagnostic Method, Version 1.0 (pdf)

Services

• assisting organizations in planning, implementing, and improving their incident management capabilities
• developing and delivering public courses, on-site courses, and facilitated workshops
• evaluating incident management capabilities
• certifying incident handlers
• licensing of training materials and a train-the-trainer program

Research

• incident management and CSIRT best practices
• CSIRT evaluation metrics, measurements, and tools
• incident management body of knowledge
• response strategies and best practices for various incident types

Need to create a CSIRT?
Creating a Computer Security Incident Response Team
October 14, 2008 (Arlington, VA)

For CSIRT Managers
Managing Computer Security Incident Response Teams
October 15 - 17, 2008 (Arlington, VA)

For New Incident Handlers
Fundamentals of Incident Handling
November 3 - 7, 2008 (Arlington, VA)

For Experienced Incident Handlers
Advanced Incident Handling for Technical Staff
November 17 - 21, 2008 (Arlington, VA)

• Incident Management Capability Metrics Version 0.1 (pdf)
• Incident Management Mission Diagnostic Method, Version 1.0 (pdf)

Technical Reports

• Defining Incident Management Processes for CSIRTs: A Work in Progress (pdf)
• Handbook for Computer Security Incident Response Teams (CSIRTs) (pdf) | html
• State of the Practice of Computer Security Incident Response Teams (pdf) | html
• Incident Management Capability Metrics (pdf) | html
• Incident Management Mission Diagnostic Method (pdf) | html

Podcasts

• CERT Lessons Learned: A Conversation with Rich Pethia
• The Real Secrets of Incident Management
• Crisis Communications During a Security Incident
• Tackling Security at the National Level: A Resource for Leaders

More podcasts

Other Documents

• CSIRT Services
• Action List for Developing a Computer Security Incident Response Team (CSIRT)
• Staffing Your Computer Security Incident Response Team – What Basic Skills Are Needed?
• CSIRT Frequently Asked Questions

More documents

This map identifies locations of teams who have an established relationship with the CERT/CC and/or are members of FIRST.

CSIRT Lists

• FIRST Member team information
• TI Directory of European CSIRTs
• APCERT Member Teams