A model for security incident response in the South African National Research and Education network

This dissertation addresses the problem of a lack of a formal incident response capability in the South African National Research and Education Network (SA NREN). The model highlights the decisions required for the business requirements, services, team model and staff, policies and processes, tools and technologies, and partners of a CSIRT respectively. Implementing this model will result in a prepared, improved and coordinated response to IT security incidents affecting the SA NREN.

Find it here.