Improving Sector Based Incident Response
summary
A new practical guide, the Sector CSIRT Framework, lays out six concrete steps—prerequisites, stakeholder surveys, gap analysis, a road map, staged implementation, and post‑implementation lessons—to build sector‑based CSIRTs and fold them into a national cybersecurity ecosystem. It codifies lessons from seven years of deployments (and two decades of SEI practice), warns that misaligned roles cause trust and disruption, offers two operational models (national‑led vs sector‑led), and emphasizes iterative measurement and adjustment.
AI-written summary · about
chapters (7)
- 0:00Start
- 2:22Introduction - The Security Operations Team
- 3:34Infrastructure, Critical Infrastructure, and Sectors
- 11:09Back to the beginning...
- 15:05Understand the National Cybersecurity Ecosystem
- 22:07Example - Identify Considerations and Create a Roadmap
- 23:40Implementation
related talks
35mBuilding Capacity in Critical Infrastructure Sectors
01h 29mFrameworks and Related Standards
31mApproaches & Practices for Increasing the Maturity & Capabilities for CSIRTs in Emerging Economies
42mClimbing Toward the Summit of Defense: Practical Methods for Strengthening CSIRT Organizations
25mConsiderations in CSIRT Activities in the Risk of Infection with New Real Viruses
35mRevolutionizing Cyber Defense: The NIST CSF 2.0 Advantage
39mPanel: Tips and Tricks to Run a CSIRT in Low-income and Fragile Contexts
28mFrom 2017 to 2021: Integration of an Operational Situation Awareness Team to a CSIRT...