Best Practices for National Cyber Security: Building a National Computer Security Incident Management Capability, Version 2.0

As nations recognize that their critical infrastructures have integrated sophisticated information and communications technologies (ICT) to provide greater efficiency and reliability, they quickly realize the need to effectively manage risk arising from the use of these technologies. Establishing a national computer security incident management capability can be an important step in managing that risk. In this document, this capability is referred to as a National CSIRT, although the specific organizational form may vary among nations. Nations face various challenges when working to strengthen incident management, such as the lack of information providing guidance for establishing a national capability, determining how this capability can support national cyber security, and managing the national incident management capability. This document, first in the Best Practices for National Cyber Security series, provides information that interested organizations and governments can use to develop a national incident management capability. The document explains the need for national incident management and provides strategic goals, enabling goals, and additional resources pertaining to the establishment of National CSIRTs and organizations like them.

PDF [397 KB]

Authors

John Haller

Samuel A. Merrell

Matthew J. Butkovic

Bradford J. Willke

Technical Report
CMU/SEI-2011-TR-015
April 2011

Cite This Report

SEI:

Haller, John; Merrell, Samuel; Butkovic, Matthew ; & Willke, Bradford. Best Practices for National Cyber Security: Building a National Computer Security Incident Management Capability, Version 2.0 (CMU/SEI-2011-TR-015). Software Engineering Institute, Carnegie Mellon University, 2011. http://www.sei.cmu.edu/library/abstracts/reports/11tr015.cfm

IEEE:

J. Haller, S. Merrell, M. Butkovic, and B. Willke, "Best Practices for National Cyber Security: Building a National Computer Security Incident Management Capability, Version 2.0," Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania, Technical Report CMU/SEI-2011-TR-015, 2011. http://www.sei.cmu.edu/library/abstracts/reports/11tr015.cfm

APA:

Haller, J., Merrell, S., Butkovic, M., & Willke, B. (2011) . Best Practices for National Cyber Security: Building a National Computer Security Incident Management Capability, Version 2.0 (CMU/SEI-2011-TR-015). Retrieved May 23, 2012, from the Software Engineering Institute, Carnegie Mellon University website: http://www.sei.cmu.edu/library/abstracts/reports/11tr015.cfm

CHI:

Haller, John, Samuel Merrell, Matthew Butkovic, and Bradford Willke. Best Practices for National Cyber Security: Building a National Computer Security Incident Management Capability, Version 2.0 (CMU/SEI-2011-TR-015). Pittsburgh, PA: Software Engineering Insitute, Carnegie Mellon University, 2011. http://www.sei.cmu.edu/library/abstracts/reports/11tr015.cfm

MLA:

Haller, J., Merrell, S., Butkovic, M., & Willke, B. 2011. Best Practices for National Cyber Security: Building a National Computer Security Incident Management Capability, Version 2.0 (Technical Report CMU/SEI-2011-TR-015). Pittsburgh: Software Engineering Insitute, Carnegie Mellon University. http://www.sei.cmu.edu/library/abstracts/reports/11tr015.cfm

Find Us Here

Share This Page

Share on Facebook  Send to your Twitter page  Save to del.ico.us  Save to LinkedIn  Digg this  Stumble this page.  Add to Technorati favorites  Save this page on your Google Home Page 

For more information

Contact Us

info@sei.cmu.edu

412-268-5800