Source: CERT/CC

 

• Defining Incident Management Processes for CSIRTs: A Work in Progress
• Staffing Your Computer Security Incident Response Team – What Basic Skills Are Needed?
• Limits to Effectiveness in Computer Security Incident Response Teams
• Creating a Financial Institution CSIRT: A Case Study 
• Organizational Models for Computer Security Incident Response Teams
• CSIRT Services 
• CSIRT Frequently Asked Questions
  
• Handbook for Computer Security Incident Response Teams (CSIRTs)
  
• State of the Practice of Computer Security Incident Response Teams
  
• Incident Management Capability Metrics
• Incident Management Mission Diagnostic Method
  

Source: SANS

• A Guide to Encrypted Storage Incident Handling   
• Security Incident Handling in Small Organizations   
• Expanding Response: Deeper Analysis for Incident Handlers   
• Mining gold… A primer on incident handling and response   
• Creating and Maintaining Policies for Working with Law Enforcement   
• Incident Handling for SMEs (Small to Medium Enterprises)   
• Baselines and Incident Handling   
• Creating and Managing an Incident Response Team for a Large Company   
• An Incident Handling Process for Small and Medium Businesses   
• Incident Management 101 Preparation & Initial Response (aka Identification)   
• Implementing a Computer Incident Response Team in a Smaller, Limited Resource Organizational Setting   
• Building an Incident Response Program To Suit Your Business 
  
• Developing a Computer Forensics Team 
  
• Computer Incident Response Team 
  
• Incident Response and Creating the CSIRT in Corporate America 
  
• Corporate Incident Handling Guidelines

Source: Terena.org

• RFC 2196. Site Security Handbook
  
• RFC 2350. Expectation for Security Incident Response Teams
  
• RFC2505. Users’ Security Handbook
  
• RFC3013. Recommended Internet Service Provider Security Services and Procedures 
• Guide to Setting up a CERT   
  
• Establishing a Computer Security Incident Response Capability (CSIRC).

Source: FIRST

• FIRST Site Visit Requirements and Assessment
• CSIRT Case Classification (Example for enterprise CSIRT)

Source: ITU

• ITU Cybersecurity Work Programme to Assist Developing Countries 2007-2009

Source: US-CERT

• Incident Management
• Defining Computer Security Incident Response Teams
  
• The Role of Computer Security Incident Response Teams in the Software Development Life Cycle
  

Source: NIST

• NIST Computer Security Incident Handling Guide
• Guide to Integrating Forensic Techniques into Incident Response

Source: ENISA

• A basic collection of good practices for running a CSIRT

Source: GovCERT-NL

• CERT-in-a-box

Source: CERT-In

• CERT-In Security Guidelines
• CERT-In Case Studies

Source: Cloud Security Alliance

• CloudCERT

Source: New approaches to Security – CloudCERT – Dr. Arun Sood

• CloudCERT_AS