The
State of the Practice for CSIRTs (Killcrece, 2003) is designed to
assist new and existing teams in understanding best practices
and recommendations for handling incidents and related
CSIRT services. The Organisational models for CSIRT publication
(Killcrece et al., 2003) focuses on selecting the right
model for an organisation's incident response capabilities.
Defining Incident Management Processes for CSIRTs: A Work
in Progress (Alberts et al., 2004) provides an overview of the
processes and functions and supporting people, technology,
and procedures that are involved in incident management.