CIRT-Level Response to Advanced Persistent Threat - SANS ...
CIRT-Level Response to Advanced Persistent Threat - SANS ...
CIRT-Level Response to Advanced Persistent Threat - SANS ...
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Company<br />
General Electric<br />
Aerospace 1 1<br />
Aerospace 2 1<br />
DIB 1 1<br />
DIB 2 1<br />
DIB 3 1<br />
DIB 4 1<br />
Aerospace 3 1<br />
Silicon Valley 1 3<br />
Software Company 1 3<br />
Software Company 2 2<br />
Utility Company 1 2<br />
5 IR per<br />
10,000<br />
employees<br />
Peer incident detection and response teams<br />
Team Name<br />
GE-<strong>CIRT</strong><br />
IRT<br />
NOSC / SecEng<br />
Sec Ops<br />
CSIRT<br />
DIB3-<strong>CIRT</strong><br />
DIB4CERT<br />
IRT<br />
<strong>CIRT</strong><br />
IRT<br />
Sec Ops Center<br />
Sec Ops Center<br />
Employees<br />
296,000<br />
XXX,000<br />
XX,000<br />
XXX,000<br />
XX,000<br />
XXX,000<br />
XX,000<br />
X,000<br />
XX,000<br />
XX,000<br />
X,000<br />
XX,000<br />
Team FTE<br />
12<br />
11<br />
13<br />
11<br />
5<br />
50<br />
42<br />
2<br />
24<br />
41<br />
15<br />
16<br />
Contrac<strong>to</strong>rs<br />
3<br />
0<br />
0<br />
1<br />
2<br />
0<br />
2<br />
0<br />
0<br />
0<br />
0<br />
0<br />
FTE per<br />
EC<br />
.000041<br />
.000073<br />
.000289<br />
.000088<br />
.000076<br />
.000345<br />
.000575<br />
.000500<br />
.000366<br />
.000442<br />
.001875<br />
.000800<br />
•Average FTE per EC (AFPE): .000456<br />
•Average FTE + Contrac<strong>to</strong>r per EC (AFCPE): .000462<br />
•Implied GE-<strong>CIRT</strong> FTE for GE based on AFPE: 134 FTEs<br />
•Implied GE-<strong>CIRT</strong> FTE for GE based on AFCPE: 136 FTEs +<br />
Contrac<strong>to</strong>rs<br />
FTE + Contrac<strong>to</strong>r<br />
per EC<br />
.000051<br />
.000073<br />
.000289<br />
.000096<br />
.000106<br />
.000345<br />
.000603<br />
.000500<br />
.000366<br />
.000442<br />
.001875<br />
.000800<br />
<strong>CIRT</strong> FTE per 10,000<br />
employees<br />
0.41<br />
0.73<br />
2.89<br />
0.88<br />
0.76<br />
3.44<br />
5.75<br />
5<br />
3.66<br />
4.42<br />
18.75<br />
8<br />
Sources<br />
•2009 DSIE survey 1<br />
•2008 EIMP project 2<br />
•2009 EIMP project 3<br />
15
Change language