Incident Response Flashcards
1
Q
What are CSIRT and CERT?
A
Computer Security Incident Response Team, Computer Emergency Response Team
2
Q
What are the tasks listed in the CSIRT mission statement?
A
- make sure priorities are correct
- understand when and how to react to a situation
- regularly revise policies and procedures
- regularly revise nature and scope of provided services
3
Q
What are the 6 steps of incident response?
A
- Preparation
- Identification
- Containment
- Eradication
- Recovery
- Lessons learned
