Ħolqien ta 'Tim ta' Rispons għall-Inċidenti tas-Sigurtà Ċibernetika
Oħloq it-Tim tal-Battalja tiegħek
Dan il-kors huwa ddisinjat għall-maniġers u l-mexxejja tal-proġett li ġew inkarigati bil-ħolqien tas-Cyber Battle Team tiegħek, li f'termini tekniċi huwa Tim ta 'Rispons għal Inċidenti tas-Sigurtà tal-Kompjuter (CSIRT). Dan il-kors jipprovdi ħarsa ġenerali ta 'livell għoli tal-kwistjonijiet u d-deċiżjonijiet ewlenin li għandhom jiġu indirizzati fl-istabbiliment ta' Tim ta 'Battalja Ċibernetika. Bħala parti mill-kors, l-istaff tiegħek jiżviluppa pjan ta 'azzjoni li jista' jintuża bħala punt tat-tluq fl-ippjanar u l-implimentazzjoni taċ-Cyber Battle Team tiegħek. Huma jkunu jafu liema tipi ta 'riżorsi u infrastruttura meħtieġa biex jappoġġjaw tim. Barra minn hekk, dawk li jattendu se jidentifikaw politiki u proċeduri li għandhom jiġu stabbiliti u implimentati meta jinħoloq CSIRT.
NOTA: Dan il-kors jakkumula punti lejn Masters fis-Cyber Security mill-Software Engineers Institute
(...)
The Cyber Security Incident Response Team (CSIRT) is a key component of an organization's security posture. By definition, a CSIRT is a team of individuals who are responsible for responding to computer security incidents. While the term "computer security incident" can be used to describe any type of event that poses a threat to computer systems or data, in practice, most CSIRTs focus on responding to cyber incidents – that is, events that involve some form of malicious activity carried out using digital means.
A CSIRT assesses threat vulnerabilities and the potential for cyber-attacks. They also assess the damage caused by an attack and are quickly deployed with pre-planned strategies to mitigate the attack and have the organisation up and running again as quickly as possible. Their goal is to prevent further attacks from occurring.
Why should I establish a Cyber Security Incident Response Team BEFORE a cyber attack occurs?
Creating a Cyber Security Incident Response Team (CSIRT) is an important step in preparing for a cyber-attack. A CSIRT is a group of people who are trained and prepared to respond to a security incident. The team can provide support during and after an attack, including helping to contain the damage, restore systems, and investigate the incident. Having a CSIRT in place before an attack occurs can help to minimize the impact of the attack and ensure that operations can resume quickly. Furthermore, a CSIRT can help to build trust with customers and other stakeholders by demonstrating that the organization takes security seriously. As such, creating a CSIRT is an important part of preparing for a cyber-attack.
Min għandu jagħmel dan il-kors?
Maniġers attwali u prospettivi tas-CSIRT; Maniġers tal-livell C bħal CIOs, CSOs, CROs; u mexxejja tal-proġett interessati li jistabbilixxu jew jibdew Cyber Battle Team.
Persunal ieħor li jinteraġixxi ma 'CSIRTs u jixtieq jikseb għarfien aktar profond ta' kif joperaw CSIRTs. Pereżempju, kostitwenti CSIRT; ġestjoni ta 'livell ogħla; relazzjonijiet mal-midja, avukat legali, infurzar tal-liġi, riżorsi umani, verifika, jew persunal tal-immaniġġjar tar-riskju.
Suġġetti
Ġestjoni tal-inċidenti u r-relazzjoni mas-CSIRTs
Prerekwiżiti għall-ippjanar ta 'CSIRT
Noħolqu viżjoni CSIRT
Missjoni CSIRT, għanijiet, u livell ta 'awtorità
Kwistjonijiet u mudelli organizzattivi tas-CSIRT
Firxa u livelli ta 'servizzi pprovduti
Kwistjonijiet ta 'finanzjament
Kiri u taħriġ tal-persunal inizjali tas-CSIRT
Implimentazzjoni tal-politiki u l-proċeduri tas-CSIRT
Rekwiżiti għal infrastruttura CSIRT
Kwistjonijiet u strateġiji ta 'implimentazzjoni u operattivi
Kwistjonijiet ta 'kollaborazzjoni u komunikazzjoni
X'se jitgħallmu l-istaff tiegħek?
L-istaff tiegħek jitgħallem:
Jifhmu r-rekwiżiti għall-istabbiliment ta 'Tim ta' Battalja Ċibernetika effettiv (CSIRT)
Ippjana b'mod strateġiku l-iżvilupp u l-implimentazzjoni ta 'Cyber Battle Team ġdid.
Jenfasizzaw kwistjonijiet assoċjati mal-assemblaġġ ta 'tim li jirreaġixxi u effettiv ta' professjonisti tas-sigurtà tal-kompjuter
Identifika politiki u proċeduri li għandhom jiġu stabbiliti u implimentati.
Jifhmu diversi mudelli organizzattivi għal Cyber Battle Team ġdid
Jifhmu l-varjetà u l-livell ta 'servizzi li Cyber Battle Team jista' jipprovdi