Business/Management Track
This tutorial will discuss the reasons, outcomes, and benefits
of evaluating incident management capabilities such as CSIRTs.
Four different methodologies will be presented that can be used to evaluate various aspects of incident management capabilities.
During the tutorial, practical exercises will be conducted that demonstrate various components of each methodology to give a real-life perspective on performing such evaluations.
Four different methodologies will be presented that can be used to evaluate various aspects of incident management capabilities.
During the tutorial, practical exercises will be conducted that demonstrate various components of each methodology to give a real-life perspective on performing such evaluations.
http://www.first.org/conference/2006/papers/ruefle-robin-slides.pdf
Type: Slides
Format: application/pdf
Last updated: May 18, 2006
Size: 602 Kb
Authors & presenters
Audrey Dorofee (CERT/CC Carnegie Mellon University, US) Chris Alberts (CERT/CC Carnegie Mellon University, US) Robin Ruefle (CERT/CC Carnegie Mellon University, US)