Question

how would you build a csirt? what are the components to building an effective team?

Answer 1

Best Practices for Creating an Effective Computer Security...
Ten Best Practices for Creating Your Incident Response Team.
Build a friendly team. ...
Recruit an effective advocate or executive sponsor. ...
Define key roles and recruit from across the organization. ...
Create a deep bench based on realistic IT budgets. ...
Insulate team members from distractions.

Answer 2

Explanation:

Explanation:

Part of building an effective CSIRT is educating your entire organization about its critical, cross-functional nature. Every team member needs to understand the value of complementary skills and roles.

This helps eliminate friction between, for example, technical members in the SOC and nontechnical CSIRT members.