Establishing a Computer Security Incident Response Capability (CSIRC)

Published

November 1, 1991

Author(s)

John P. Wack

Abstract

[Superseded by SP 800-61 (January 2004): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=151291] Government agencies and other organizations have begun to augment their computer security efforts because of increased threats to computer security. Incidents involving these threats, including computer viruses, malicious user activity, and vulnerabilities associated with high technology, require a skilled and rapid response before they can cause significant damage. These increased computer security efforts, described here as Computer Security Incident Response Capabilities (CSIRCs), have as a primary focus the goal of reacting quickly and efficiently to computer security incidents. CSIRC efforts provide agencies with a centralized and cost-effective approach to handling computer security incidents so that future problems can be efficiently resolved and prevented.

Citation

Special Publication (NIST SP) - 800-3

Report Number

800-3

NIST Pub Series

Special Publication (NIST SP)

Pub Type

NIST Pubs

Superceded By Publication

Computer Security Incident Handling Guide

Download Paper

DOI Link

Keywords

incident response, information security, malware

Citation

Wack, J. (1991), Establishing a Computer Security Incident Response Capability (CSIRC), Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/nist.sp.800-3 (Accessed April 18, 2024)