FIRST services framework : team rypes within the context of services frameworks

Abstract

While there are established definitions of CSIRT and PSIRT, in practice, even those definitions have slightly different meanings within some communities or contexts. Rather than simply building on these established definitions, volunteers from the global community, the CSIRT Framework Development Special Interest Group (CSIRT SIG), are working diligently to develop an informal shared understanding of relevant terms. Other team types (e.g., Security Operations Centers [SOCs] and Information Sharing and Analysis Centers [ISACs]) are becoming increasingly vital for addressing urgent Cyber Insecurity. Therefore, it is necessary to establish standard definitions for at least some of these team types.