Response needed w4- disaster recovery

profileSuma
Responseneededw4-Disasterrecovery.docx

Article 1:

Search "scholar.google.com" or your textbook. Discuss the technical skills required to have a CSIRT response team consisting of employees with other job duties (i.e., not a full-time CSIRT job category)? Why or why not? What factors will influence their decision? 

In an organization while building a CSIRT team, team should not be only capable in handling Incident Response and Contingency planning task but also, they should possess other interpersonal skill in order to perform their task effectively. It is sometimes difficult to find experienced staff, but a person who has a proper understanding of goals and missions of CSIRT, with kind of usage of technology, with managing severe load work should be easily able to guide his team-mates in learning other skill sets (Ruefle,2003). With the help of internal training and Mock drills, a CSIRT expertise can nurture other staff internally, so that work can be performed more diligently.

While handling majority of part of Incident responses, CSIRT staff will get involve in wide range of personal skills. One of them is Communication. One should have ability to communicate effectively. This ensures that correct flow of ideas, information occur between two or more people. CSIRT staff need to be good listener, so that correct notes are taken out about an occurred incident (Hove,2013). They should have ability to communicate only that portion of talks that are important for getting problem solved. Oral Communication is another category which will help CSIRT staff to describe information to their peers. They should ensure that right words to right people are heard. Thirdly, CSIRT staff should have ability to follow company’s procedure. Sometimes you will need to spend less time working on same task, as those tasks will be documented as a standard procedure. If staff member strongly feels that change is required in the way process is documented, then he should take extra responsibility to contact admin of that process and change documented plan as required (Torres, 2009). Fourthly, CSIRT staff should have good presentation skills. This presentation skill can help to give briefing to larger audience, to represent staff view to management, and help with co-ordination while managing conferences.

And lastly, CSIRT staff should have proper time management skills. In Disaster Recovery, getting each goal done on time is an important aspect of skill set that is required. To recapitulate, CSIRT staff should also possess other interpersonal skills through which they can become a problem solver.

References:

Killcrece, G., Kossakowski, K. P., Ruefle, R., & Zajicek, M. (2003). Organizational models for computer security incident response teams (CSIRTs) (No. CMU/SEI-2003-HB-001). CARNEGIE-MELLON UNIV PITTSBURGH PA SOFTWARE ENGINEERING INST.

Hove, C., & Tårnes, M. (2013). Information security incident management: an empirical study of current practice -master’s thesis, Institutt for telematikk.

Sveen, F. O., Torres, J. M., & Sarriegi, J. M. (2009). Blind information security strategy. International Journal of critical infrastructure protection2(3), 95-109.