search menu icon-carat-right cmu-wordmark

Best Practices for National Cyber Security: Building a National Computer Security Incident Management Capability, Version 2.0

Technical Report
In this 2011 report, an update to its 2010 counterpart, the authors provide insight that interested organizations and governments can use to develop a national incident management capability.
Publisher

Software Engineering Institute

CMU/SEI Report Number
CMU/SEI-2011-TR-015
DOI (Digital Object Identifier)
10.1184/R1/6572093.v1

Abstract

As nations recognize that their critical infrastructures have integrated sophisticated information and communications technologies (ICT) to provide greater efficiency and reliability, they quickly realize the need to effectively manage risk arising from the use of these technologies. Establishing a national computer security incident management capability can be an important step in managing that risk.

In this document, an update to its 2010 counterpart, this capability is referred to as a National CSIRT, although the specific organizational form may vary among nations. Nations face various challenges when working to strengthen incident management, such as the lack of information providing guidance for establishing a national capability, determining how this capability can support national cyber security, and managing the national incident management capability. This document, first in the Best Practices for National Cyber Security series, provides information that interested organizations and governments can use to develop a national incident management capability. The document explains the need for national incident management and provides strategic goals, enabling goals, and additional resources pertaining to the establishment of National CSIRTs and organizations like them.

Cite This Technical Report

Haller, J., Merrell, S., Butkovic, M., & Willke, B. (2011, April 1). Best Practices for National Cyber Security: Building a National Computer Security Incident Management Capability, Version 2.0. (Technical Report CMU/SEI-2011-TR-015). Retrieved May 30, 2024, from https://doi.org/10.1184/R1/6572093.v1.

@techreport{haller_2011,
author={Haller, John and Merrell, Samuel and Butkovic, Matthew and Willke, Bradford},
title={Best Practices for National Cyber Security: Building a National Computer Security Incident Management Capability, Version 2.0},
month={Apr},
year={2011},
number={CMU/SEI-2011-TR-015},
howpublished={Carnegie Mellon University, Software Engineering Institute's Digital Library},
url={https://doi.org/10.1184/R1/6572093.v1},
note={Accessed: 2024-May-30}
}

Haller, John, Samuel Merrell, Matthew Butkovic, and Bradford Willke. "Best Practices for National Cyber Security: Building a National Computer Security Incident Management Capability, Version 2.0." (CMU/SEI-2011-TR-015). Carnegie Mellon University, Software Engineering Institute's Digital Library. Software Engineering Institute, April 1, 2011. https://doi.org/10.1184/R1/6572093.v1.

J. Haller, S. Merrell, M. Butkovic, and B. Willke, "Best Practices for National Cyber Security: Building a National Computer Security Incident Management Capability, Version 2.0," Carnegie Mellon University, Software Engineering Institute's Digital Library. Software Engineering Institute, Technical Report CMU/SEI-2011-TR-015, 1-Apr-2011 [Online]. Available: https://doi.org/10.1184/R1/6572093.v1. [Accessed: 30-May-2024].

Haller, John, Samuel Merrell, Matthew Butkovic, and Bradford Willke. "Best Practices for National Cyber Security: Building a National Computer Security Incident Management Capability, Version 2.0." (Technical Report CMU/SEI-2011-TR-015). Carnegie Mellon University, Software Engineering Institute's Digital Library, Software Engineering Institute, 1 Apr. 2011. https://doi.org/10.1184/R1/6572093.v1. Accessed 30 May. 2024.

Haller, John; Merrell, Samuel; Butkovic, Matthew; & Willke, Bradford. Best Practices for National Cyber Security: Building a National Computer Security Incident Management Capability, Version 2.0. CMU/SEI-2011-TR-015. Software Engineering Institute. 2011. https://doi.org/10.1184/R1/6572093.v1