The resources on this page address practical operational and technical issues that every CSIRT must consider. Below are the resources we provide. Here are a few that are available from other organizations as well:
Site Security Handbook (RFC 2196) – Internet Engineering Task Force/Network Working Group memo
This handbook offers information about developing computer security policies and procedures for sites that have systems on the internet.
The SANS Security Policy Project – SANS website
These resources provide information about the rapid development and implementation of information security policies.
The Role of Computer Security Incident Response Teams in the Software Development Life Cycle – Build Security In website
This BSI document discusses the role a CSIRT can play in the Systems Development Life Cycle (SDLC).
Incident Response Career Trends – GovInfoSecurity article
This document provides information about the skills needed today in incident response and describes how professionals can attain or refine those skills.