As nations recognize that their critical infrastructures have integrated sophisticated information and communications technologies (ICT) to provide greater efficiency and reliability, they quickly realize the need to effectively manage risk arising from the use of these technologies. Establishing a national computer security incident management capability can be an important step in managing that risk. In this document, this capability is referred to as a National CSIRT, although the specific organizational form may vary among nations. Nations face various challenges when working to strengthen incident management, such as the lack of information providing guidance for establishing a national capability, determining how this capability can support national cyber security, and managing the national incident management capability. This document, first in the Best Practices for National Cyber Security series, provides information that interested organizations and governments can use to develop a national incident management capability. The document explains the need for national incident management and provides strategic goals, enabling goals, and additional resources pertaining to the establishment of National CSIRTs and organizations like them.
Technical Report
CMU/SEI-2011-TR-015
April 2011
SEI:
Haller, John; Merrell, Samuel; Butkovic, Matthew; & Willke, Bradford. Best Practices for National Cyber Security: Building a National Computer Security Incident Management Capability, Version 2.0 (CMU/SEI-2011-TR-015). Software Engineering Institute, Carnegie Mellon University, 2011. http://www.sei.cmu.edu/library/abstracts/reports/11tr015.cfm
IEEE:
J. Haller, S. Merrell, M. Butkovic, and B. Willke, "Best Practices for National Cyber Security: Building a National Computer Security Incident Management Capability, Version 2.0," Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania, Technical Report CMU/SEI-2011-TR-015, 2011. http://www.sei.cmu.edu/library/abstracts/reports/11tr015.cfm
APA:
Haller, J., Merrell, S., Butkovic, M., & Willke, B. (2011). Best Practices for National Cyber Security: Building a National Computer Security Incident Management Capability, Version 2.0 (CMU/SEI-2011-TR-015). Retrieved May 22, 2013, from the Software Engineering Institute, Carnegie Mellon University website: http://www.sei.cmu.edu/library/abstracts/reports/11tr015.cfm
CHI:
Haller, John, Samuel Merrell, Matthew Butkovic, and Bradford Willke. Best Practices for National Cyber Security: Building a National Computer Security Incident Management Capability, Version 2.0 (CMU/SEI-2011-TR-015). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2011. http://www.sei.cmu.edu/library/abstracts/reports/11tr015.cfm
MLA:
Haller, J., Merrell, S., Butkovic, M., & Willke, B. 2011. Best Practices for National Cyber Security: Building a National Computer Security Incident Management Capability, Version 2.0 (Technical Report CMU/SEI-2011-TR-015). Pittsburgh: Software Engineering Institute, Carnegie Mellon University. http://www.sei.cmu.edu/library/abstracts/reports/11tr015.cfm
For more information