thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Operations · Foundational

Incident Response Team (CSIRT)

The group responsible for handling security incidents, also called a computer security incident response team.

Definition

A CSIRT includes incident handlers and analysts and draws on IT, legal, HR, public relations, management and sometimes external specialists. Models include central, distributed and coordinating teams, staffed internally, outsourced or hybrid. A CERT is a similar term often used for national teams.

Example

A CSIRT convening with legal and communications to manage a data breach.

Exam tip

Non-technical members (legal, HR, PR) are part of the team; exam questions test this.

Related terms