Best Practices for Establishing a National CSIRT by the Organization of American States (OAS)

A Computer Security Incident Response Team (CSIRT) is an organization whose primary purpose is to provide information security incident response services to a particular community. Several types of CSIRTs are analyzed in this guide, including National-level CSIRTs, which respond to incidents at the nation-state level. This guide discusses the process of managing a project for the creation and deployment of a National CSIRT, including approaches and considerations necessary to define its constitution, mission, vision, scope, services, timeframe, legal, and institutional or organizational aspects. This includes an examination of the human resource requirements – both in terms of hiring and continued training – necessary to staff a national incident response team.

Source – GFCE website