FIRST - Improving Security Together 18th Annual FIRST Conference - June 2006 - Baltimore, Maryland

Evaluating CSIRT Operations







Platinum Sponsor

BT



Silver Sponsor

Diageo



Local Host

CERT Coordination Center



Supporting Sponsors

Sun



Google



Hitachi



ISS



E-Secure-IT

Korea CertCC



Conference Schedule

Business/Management Track

Monday – June 26th, 14:00

This tutorial will discuss the reasons, outcomes, and benefits of evaluating incident management capabilities such as CSIRTs.

Four different methodologies will be presented that can be used to evaluate various aspects of incident management capabilities.

During the tutorial, practical exercises will be conducted that demonstrate various components of each methodology to give a real-life perspective on performing such evaluations.

Authors & presenters

  • USAudrey Dorofee Presenter (CERT/CC – Carnegie Mellon University, US)

  • USChris Alberts (CERT/CC – Carnegie Mellon University, US)

  • USRobin Ruefle Presenter (CERT/CC – Carnegie Mellon University, US)


Conference Schedule