Resources for Building Incident Response Teams

Recently a colleague asked me for resources for building incident response teams. I promised I would provide a few ideas, so I thought a blog post might be helpful. I figured some of you might want to add comments with links or thoughts.

• The CERT.org CSIRT Development site is probably the best place to start. From there you can find free documents, links to classes offered by SEI on building CIRTs, and so on. I don't think you can beat that site!


• I don't think the resources at the FIRST site are as helpful, but the process of working toward membership is a great exercise for a new CIRT.


• My TaoSecurity books page lists several books which CIRTs will likely find helpful.

What other resources would you suggest for someone building a CIRT? Please leave out the standard information security sites. Thank you.
Tweet