Disc - 12

Discuss why a computer incident response team (CIRT) plan is needed, and its purpose.

The CIRT is the team or organization that exists to handle incidents involving computer security issues and infringements, as well as to prevent computer system security issues. The CIRT is therefore the team and the plan followed by the team is the CIRT team which is there to concentrate on the safety problem or incident where the harm does not escalate and organization continues beyond the case.

The purpose for such a plan is:

For providing the leadership and the decision making authority and guideline.

Discover the origin of the risk and also implement the computer systems recovery.

Auditing should be done by the IT auditor time to time to find whether the networks and information systems are affected or not and if it is how much.

Why are the roles and responsibilities important to be listed and kept updated for a CIRT plan.

- Connect the dots: Discuss your understanding of the CIRT incident handling procedures, the role policies play, and the importance of communication escalation procedures.