Glossary: Security Operations and Incident Response
CSIRT (computer security incident response team)
Also written: incident response team
The group that handles incidents. In a big company it is a full-time team in the SOC; in a small company like Kettle & Crane, people take roles alongside their normal jobs.
Where the book teaches it
Related terms
Incident managerSOC (Security Operations Center)Incident response