Average Rating: 0.00/10
(# Rating Votes: 0 | Rate This Course | Contribute a Review )
Short Description:
The course provides insight into the type and nature of the work that CSIRT staff may be expected to handle. The course also provides an overview of the incident handling arena including the CSIRT environment, organizational interactions, and the nature of incident response activities.
Full Description:
Course Description
Managing Computer Security Incident Response Teams (CSIRTs) is a three-day course that provides current and future managers of CSIRTs with a pragmatic view of the issues that they will face in operating an effective incident response team.
The course provides insight into the type and nature of the work that CSIRT staff may be expected to handle. The course also provides an overview of the incident handling arena including the CSIRT environment, organizational interactions, and the nature of incident response activities.
Technical issues are discussed from a management perspective. Topics include hiring CSIRT staff, operating a hotline, identifying critical information, and the importance of pre-established policies and procedures.
The course incorporates interactive instruction and role playing. During a simulated incident, attendees will gain experience with the type of decisions they might face on a regular basis.
This course will also benefit those who interact with CSIRTs and would like to gain a deeper understanding of how CSIRTs operate. This includes CSIRT constituents, higher-level management, media relations staff, and legal counsel.
Audience · Prerequisites · Objectives · Instructors · Logistics
AUDIENCE
Current and prospective managers including
managers who are interested in implementing or are required to implement a CSIRT
managers who have responsibility or must work with those who do have responsibility for computer security
managers who have experience in incident handling and want to learn more about operating effective CSIRTs
TOPICS
CSIRT management issues
CSIRT environment
range and levels of services
hiring CSIRT staff
CSIRT code of conduct
media issues
managing the CSIRT infrastructure
identifying critical information
providing the hotline and triage services and functions
coordinating response
handling major events
prioritizing and load balancing
publishing information
Forum of Incident Response and Security Teams (FIRST)
OBJECTIVES
Successful completion of this course will enable participants to
understand the incident handling arena, including major types of activities and interactions that a CSIRT may experience
understand various processes that occur during incident response work
manage a responsive, effective team of computer security professionals
identify policies and procedures that should be established and implemented for a CSIRT
LOGISTICS
Class Schedule
Managing Computer Security Incident Response Teams (CSIRTs) is a three-day course. The daily schedule is: 9:00 a.m. to 5:00 p.m.
Availability
For More Information
CERT Coordination Center Web site: http://www.cert.org
For more information about public courses and on-site training, contact
Course Information
Phone and Voice Mail: 412 / 268-9564
E-mail: training-info@cert.org
Hotel and Travel Information
Information about travelling to SEI offices in Pittsburgh, Pennsylvania and Arlington, Virginia is available on our Travel and Lodging Web pages.
Questions about this course?
Please see our Frequently Asked Questions Web page for answers to some of the more common inquiries about SEI Education and Training. If you need more information, contact us via e-mail at course-info@sei.cmu.edu or telephone at +1 412-268-7622.
Duration:
3 Days
Price:
$1,500
Submitted by: admin
Hits: 0
SEI's Managing Computer Security Incident Response Teams (CSIRTs) Course Web Page
|
