SEI Education and Training

Overview of Managing Computer Security Incident Response Teams (CSIRTs)

Dates

Prices (USD)

2003 Dates
No remaining dates for 2003.

2004 Dates

This course may also be offered by arrangement at customer sites. E-mail course-info @sei.cmu.edu or call +1 412-268-7622 for details.

Course Registration
Software Engineering Institute
Carnegie Mellon University
Pittsburgh, PA 15213-3890
Phone: 412 / 268-7388
FAX: 412 / 268-7401
E-mail: courseregistration@sei.cmu.edu

U.S.
Industry: $500
Government: $400
Academic: $400

International
$1000

Course Description

Overview of Managing Computer Security Incident Response Teams (CSIRTs) is a condensed one-day version of the three-day Managing CSIRTs course designed for current and future managers of computer security incident response teams. The course provides insight into the type and nature of the work that CSIRT managers and staff may be expected to handle. It also provides an overview of the incident handling arena, organizational interactions, and the nature of incident response activities.

The Overview of Managing Computer Security Incident Response Teams (CSIRTs) course will also benefit those who interact with CSIRTs and want to gain a better understanding of how CSIRTs operate. This includes CSIRT constituents, CIOs, higher-level management, media relations staff, and legal counsel.

Audience   ·   Prerequisites   ·   Objectives   ·   Logistics

AUDIENCE

• Managers who want to learn more about operating effective CSIRTs
• Managers who have responsibility or work with those who have responsibility for computer security
• Others who work with the CSIRT such as law enforcement, legal counsel, and public relations

TOPICS

• overview of incident handling
• hiring and retaining CSIRT staff
• CSIRT code of conduct
• media issues
• identifying critical information
• providing the hotline and triage functions
• coordinating response
• prioritizing and load-balancing

Once you have completed this course and have your CSIRT established, you may want to attend the three-day Managing Computer Security Incident Response Teams (CSIRTs) course. It will provide more in-depth information about how to effectively manage your team.

OBJECTIVES
Successful completion of this course will enable participants to

• understand the incident handling arena, including major types of activities and interactions that a CSIRT may experience
• manage a responsive, effective team of computer security professionals
• identify policies and procedures that should be established and implemented for a CSIRT

LOGISTICS

Class Schedule
Overview of Managing Computer Security Incident Response Teams (CSIRTs) is a one-day course. The daily schedule is 9:00 a.m. to 5:00 p.m. (This can be adjusted, depending on venue and resources.)

Availability
For More Information
CERT Coordination Center Web site: http://www.cert.org

For more information about public courses and on-site training, contact

Course Information
Phone and Voice Mail: 412 / 268-9564
E-mail: training-info@cert.org

Hotel and Travel Information
Information about traveling to SEI offices in Pittsburgh, Pennsylvania and Arlington, Virginia is available on our Travel and Lodging Web pages.

Questions about this course?
Please see our Frequently Asked Questions Web page for answers to some of the more common inquiries about SEI Education and Training. If you need more information, contact us via e-mail at course-info@sei.cmu.edu or telephone at +1 412-268-7622.

Related Products and Services

Courses
Creating a Computer Security Incident Response Team
Fundamentals of Incident Handling
Advanced Incident Handling for Technical Staff
Concepts and Trends in Information Security
Information Security for Technical Staff
Information Survivability: A New Executive Perspective

Publications
CERT/CC Advisories and Alerts
CSIRT Handbook

Other related publications can be seen on the CERT/CC Web site.

Events
Annual Computer Security Incident Handling Conference, sponsored by FIRST.ORG, Inc.

Course Registration

This is a Customer Site Only Course. For more information about public courses and on-site training, contact
Course Information
Phone and Voice Mail: 412 / 268-7622
E-mail: course-info@sei.cmu.edu

Course Registration
Software Engineering Institute
Carnegie Mellon University
Pittsburgh, PA 15213-3890
Phone: 412 / 268-7388
FAX: 412 / 268-7401
E-mail: courseregistration@sei.cmu.edu

^
TOP