nerdexam
(ISC)2

SSCP · Question #527

Which of the following best defines a Computer Security Incident Response Team (CSIRT)?

The correct answer is C. An organization that coordinates and supports the response to security incidents. RFC 2828 (Internet Security Glossary) defines a Computer Security Incident Response Team (CSIRT) as an organization that coordinates and supports the response to security incidents that involves sites within a defined constituency. This is the proper definition for the CSIRT…

Submitted by renata2k· Apr 18, 2026Incident Response and Recovery

Question

Which of the following best defines a Computer Security Incident Response Team (CSIRT)?

Options

  • AAn organization that provides a secure channel for receiving reports about suspected
  • BAn organization that ensures that security incidents are reported to the authorities.
  • CAn organization that coordinates and supports the response to security incidents.
  • DAn organization that disseminates incident-related information to its constituency and

How the community answered

(30 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    87% (26)
  • D
    7% (2)

Explanation

RFC 2828 (Internet Security Glossary) defines a Computer Security Incident Response Team (CSIRT) as an organization that coordinates and supports the response to security incidents that involves sites within a defined constituency. This is the proper definition for the CSIRT. To be considered a CSIRT, an organization must provide a secure channel for receiving reports about suspected security incidents, provide assistance to members of its constituency in handling the incidents and disseminate incident-related information to its constituency and other involved parties. Security-related incidents do not necessarily have to be reported to the authorities.

Topics

#CSIRT#Incident Response#Security Operations#Team Functions

Community Discussion

No community discussion yet for this question.

Full SSCP Practice