ISTM283A Disaster Recovery and Business Continuity: Build a CSIRT

Steps to building CSIRT

CSIRT stands for Computer Security Incident Response Team that receives reports in terms of security breaches that are further analyzed and is sent to the senders (Wara & Singh, 2015). The steps of building effective CSIRT includes

• Identifying the participants and the stakeholders
• Acquiring support and financial help from the management
• Generating the project plan of CSIRT
• Gathering relevant data
• Recognizing the constituency of the CSIRT
• Defining the CSIRT mission
• Obtaining and securing funding for the CSIRT operations
• Determining the level and range of services provided by the CSIRT
• Deciding the structure of CSIRT report and authority
• Recognizing the required resources
• Defining interfaces and interactions
• Defining the roles, responsibilities and the corresponding authority
• Documenting the workflow
• Establishing corresponding procedures and policies
• Collaboration
• Evolving an implementation plan along with soliciting the feedback
• Announcing the CSIRT when it is ready to be executed and implemented
• Listing the methods for analyzing the performance
• Having a backup plan for each component of the CSIRT
• Being flexible

Components of building effective team

 The successful and effective team determines the success of the team. As commented by Goetsch and Davis (2014), communication is the key to a successful team. Effective communication among the team members helps in creating a strong bond and positive working environment. The team members are able to use their strengths thereby, covering the weakness of the team members. Additionally, effective communication helps in clear flow o information within the team thereby, keeping each member updated about the progress. On the other hand, trust, respect and commitment help in laying the foundation of the team thereby, determining the working environment and success of the team (Dyer & Dyer, 2013). Flexibility, adaptability, and independence are also crucial components of the effective team, as this encourages the team members thereby, enhancing their dedication towards their roles and responsibilities (Myerson, 2012).

Conclusion

In this discussion forum, it can be concluded that CSIRT is an important team that helps in dealing with security breaches of the organizations along with evaluating the reports and sending it to the respective people. An effective CSIRT can be developed by flowing the essential steps. Additionally, communication, trust, respect, adaptability, flexibility, and independence are the pillars of building an effective team.

References

Dyer, W. G., & Dyer, J. H. (2013). Team building: Proven strategies for improving team performance. John Wiley & Sons. https://books.google.co.uk/books?hl=en&lr=&id=pUBiLcE2vkEC&oi=fnd&pg=PA207&ots=RpTvC-Fczi&sig=0aG8vvK1XmPvYy2zzFhOKqzZlh8#v=onepage&q&f=true

Goetsch, D. L., & Davis, S. B. (2014). Quality management for organizational excellence. Upper Saddle River, NJ: pearson. file:///C:/Users/absas/Downloads/5de5a3408f57150.pdf

Myerson, P. (2012). Lean supply chain and logistics management. New York: McGraw-Hill. https://www.mhprofessionalresources.com/sites/myerson/content/Meyerson_Lean_TOC.pdf

Wara, Y. M., & Singh, D. (2015). A Guide to Establishing Computer Security Incident Response Team (CSIRT) For National Research and Education Network (NREN). African Journal of Computing & ICT, 8(2), 1-8. https://pdfs.semanticscholar.org/7358/d4974d246e4ecf2d832a124cb52e69e3c49a.pdf