ResearchSpace

Prerequisites for building a computer security incident response capability

Show simple item record

dc.contributor.author Mooi, M
dc.contributor.author Botha, RA
dc.date.accessioned 2016-10-13T13:05:57Z
dc.date.available 2016-10-13T13:05:57Z
dc.date.issued 2015-08
dc.identifier.citation Mooi, R. and Botha, R.A. 2015. Prerequisites for building a computer security incident response capability. In: Proceedings of the 2015 Information Security for South Africa (ISSA 2015) Conference, 1-13 August 2015, Johannesburg en_US
dc.identifier.isbn 978-1-5090-2472-8
dc.identifier.uri http://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=7335057
dc.identifier.uri http://hdl.handle.net/10204/8818
dc.description Proceedings of the 2015 Information Security for South Africa (ISSA 2015) Conference, 1-13 August 2015, Johannesburg en_US
dc.description.abstract There are a number of considerations before one can commence with establishing a Computer Security Incident Response Team (CSIRT). This paper presents the results of a structured literature review investigating the business requirements for establishing a CSIRT. That is, the paper identifies those things that must be in place prior to commencing with the actual establishment process. These include characterising the CSIRT environment, funding, constituency, authority and legal considerations. Firstly, we identified authoritative CSIRT literature. Thereafter we identified salient aspects using a concept matrix. The study enumerates five areas of primary business requirements. Finally, a holistic view of the business requirements is provided by summarising the decisions required in each area. en_US
dc.language.iso en en_US
dc.publisher IEEE Xplore en_US
dc.relation.ispartofseries Workflow;16719
dc.subject Incident responses en_US
dc.subject Computer Security Incident Response Team en_US
dc.subject CSIRT en_US
dc.title Prerequisites for building a computer security incident response capability en_US
dc.type Conference Presentation en_US
dc.identifier.apacitation Mooi, M., & Botha, R. (2015). Prerequisites for building a computer security incident response capability. IEEE Xplore. http://hdl.handle.net/10204/8818 en_ZA
dc.identifier.chicagocitation Mooi, M, and RA Botha. "Prerequisites for building a computer security incident response capability." (2015): http://hdl.handle.net/10204/8818 en_ZA
dc.identifier.vancouvercitation Mooi M, Botha R, Prerequisites for building a computer security incident response capability; IEEE Xplore; 2015. http://hdl.handle.net/10204/8818 . en_ZA
dc.identifier.ris TY - Conference Presentation AU - Mooi, M AU - Botha, RA AB - There are a number of considerations before one can commence with establishing a Computer Security Incident Response Team (CSIRT). This paper presents the results of a structured literature review investigating the business requirements for establishing a CSIRT. That is, the paper identifies those things that must be in place prior to commencing with the actual establishment process. These include characterising the CSIRT environment, funding, constituency, authority and legal considerations. Firstly, we identified authoritative CSIRT literature. Thereafter we identified salient aspects using a concept matrix. The study enumerates five areas of primary business requirements. Finally, a holistic view of the business requirements is provided by summarising the decisions required in each area. DA - 2015-08 DB - ResearchSpace DP - CSIR KW - Incident responses KW - Computer Security Incident Response Team KW - CSIRT LK - https://researchspace.csir.co.za PY - 2015 SM - 978-1-5090-2472-8 T1 - Prerequisites for building a computer security incident response capability TI - Prerequisites for building a computer security incident response capability UR - http://hdl.handle.net/10204/8818 ER - en_ZA


Files in this item

Thumbnail
Name: Mooi_2015.pdf
Size: 468.6Kb
Format: PDF
View/Open

This item appears in the following Collection(s)

Show simple item record