What Does This Mean to My Organization?
CERT, FIRST, and several other organizations are wonderful resources for incident response teams (IRTs) to use. It is common practice for an IRT to work with such organizations to share information, share learning experiences, compare notes on incident handling, and share the burden of incident analysis.
In the authors' experience, these organizations have been very helpful to our teams in assisting us to make contact with the proper organizations, figuring out exactly what was happening with certain incidents, and providing information on patches, vulnerabilities, and workarounds to help recover from our incidents.
Get Effective Incident Response Team, The now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
