CSIRT
Also called: computer security incident response team
Computer security incident response team: the group that coordinates containment, eradication and recovery when a security incident happens. It can be staffed in-house or provided by an outside firm. Name the members, their decision rights and how to reach them in advance, so nobody is hunting for contacts in the middle of an incident.
Further reading: csrc.nist.gov
Advisories that mention this term
HighEspionage / nation-stateMonitoringBackfillMedia reported· updated Nov 7
Poland's CERT.PL Publishes Observations on APT28 Campaign
Poland's national computer security incident response team, CERT.