What is a CSIRT - Computer Security Incident Response Team?

The CSIRT, for its acronym in English Computer Security Incident Response Team, is a team responsible for the development of preventive and reactive measures for security incidents in information systems.

The main mission is to mitigate the impacts of cyber risks; If any materialize, they can be controlled by minimizing the adverse effects on the primary activities, restoring the service (s) in the shortest possible time.

CSIRT’s Kinds

  • Academics
  • Commercial
  • Government
  • Critical Infrastructures
  • Nationals
  • Militar

Tipos de servicios de un CSIRT

  • Proactive services:

They allow the analysis of data in information to enable proactive measures to be taken in advance in order to minimize the occurrence of incidents due to the implementation of security strategies.

  • Reactive services:

These are the immediate responses before cyber incidents, which allow developing strategies to react appropriately, thus minimizing the impact and recovery time.