Introduction and Evaluation of Computer Security Incident Response Team (CSIRT) in Organizations
Mohammad Mahdi Estedlal · Cumhuriyet Science Journal · 2015
Abstract With the rapid development of information technology and the continuous changes in the services, information technology has played a key role in organizations. During the past years, a great number of IT infrastructure and particular applications have been employed by the organization. Many organizations have purchased a large number of high-end enterprise applications such as ERP, CRM, etc. to improve their business capacity. At the same time, these organizations a huge amount of time and resources are spent for maintenance applications. At the same time, these organizations are spent a huge amount of time and resources for application’s maintenance. since any incident that may result in service interruptions, causes very high costs for organizations, The issue of how organizations can deploy an effective way to manage events, So that costs can be reduced, the occurrence of events can be avoided and the continuity of their business can be guaranteed, is considered. For this purpose, approaches and events management models offered by some mature frameworks such as ITIL, COBIT and standards like ISO / IEC 20000, are accepted widely in many organizations. These frameworks combine extensive management practices in order to support organizations for achieving the desired quality and creating value from IT operations. For example ITIL provides A set of best process-oriented practices for IT service management. IT service management practices, directly or indirectly causes establishing communication between employees, innovation, finances and domestic business interests.