Computer Security Incident Response Team—group responsible for handling security incidents.
A Computer Security Incident Response Team (CSIRT) is a group responsible for receiving, reviewing, and responding to security incidents. CSIRTs may be internal teams or external services. Responsibilities include incident detection, analysis, containment, eradication, recovery, and post-incident learning. Effective CSIRTs have clear charters, defined responsibilities, necessary tools, and practiced procedures. National CSIRTs (like NCSC in UK) coordinate responses to major incidents.
Why It Matters
The DSC Perspective:
Someone must be responsible for incident response. Whether internal team or external service, know who handles incidents and how to engage them. 24/7 coverage is important—attacks don't follow business hours.