Skip to content

Glossary: Security Operations and Incident Response

CSIRT (computer security incident response team)

Also written: incident response team

The group that handles incidents. In a big company it is a full-time team in the SOC; in a small company like Kettle & Crane, people take roles alongside their normal jobs.

Where the book teaches it

Related terms

Incident managerSOC (Security Operations Center)Incident response