State of the Practice of Computer Security Incident Response Teams ...

Appendix C: Training Sources for CSIRTs
The following list is a small sample of training sources for CSIRTs and incident handling.
Many of these, and other sources, also provide training in related areas of computer forensics
or information security. This is not a comprehensive list. Search the web, or follow the links
from some of the sites below, to find other sources for relevant training for CSIRTs.
Incident Response Training
@stake – http://www.atstake.com/
@stake Academy
http://www.atstake.com/services/education/
Lecture and lab courses, including Incident Response and Forensic Readiness
Backbone Security – http://www.backbonesecurity.com/
Training
http://www.backbonesecurity.com/training/
Attack Postmortem
CERT Coordination Center – http://www.cert.org
CERT Training
http://www.cert.org/nav/index_gold.html
CSIRT Development
http://www.cert.org/csirts/
Courses include Creating a CSIRT, Overview of Managing CSIRTs,
Managing CSIRTs, Fundamentals of Incident Handling, and Advanced Incident Handling
for Technical Staff
Computer Security Institute (CSI) – http://www.gocsi.com/
Annual Conference
http://www.gocsi.com/annual/
Conference sessions include Response Teams
CSI Training
http://www.gocsi.com/training/
CSI Information Security Seminars
http://www.gocsi.com/infosec/wkshop.html
CMU/SEI-2003-TR-001 157