CSIRT Maturity workshop
The CSIRT Maturity Workshop helps organisations to evaluate and improve the maturity of their computer emergency response team (CSIRT). The NCSC has organised two workshops, one workshop for managers and one for analysts.
How does the CSIRT Maturity Workshop work?
The CSIRT Maturity Workshop is facilitated by Dr Stephen Zaccaro and Daniel Shore, MA from George Mason University. With its structure based on the Cyber Security Incident Response Social Maturity Model, the workshop is split into four parts:
- sharing evaluation instruments to identify the strengths and weaknesses of teams;
- performing individual and group exercises focused on behaviour in CSIRT teams;
- exchanging experiences with other participants;
- coaching by means of the CSIRT Teamwork manual.
The model, which focuses on organisation, human aspects, tools and processes, recognises four levels of maturity for each aspect.
What is the impact of the CSIRT Maturity Workshop?
The CSIRT Maturity Workshop had 41 participants: 16 managers and 25 analysts. Participants familiarised themselves with the George Mason University Cyber Security Incident Response Social Maturity model and learnt how to use it in their daily work.
What does this mean for my organisation?
The CSIRT Maturity Workshop uses the CSIRT Teamwork manual. This manual helps in hiring the correct personnel, training and developing good communications and cooperation in CSIRT teams, building trust and setting up information flows. Would you like to use the model in your organisation? Download the CSIRT Teamwork manual here.
What does the NCSC do?
The NCSC organised the workshop in cooperation with George Mason University. The workshop is part of a research project funded by the United States Department of Homeland Security, Science & Technology Directorate.