A specialized team that responds when a security incident occurs.
Short for Computer Security Incident Response Team, a specialized team responsible for detecting, analyzing, and responding to incidents. Whereas a SOC handles day-to-day monitoring, a CSIRT focuses on commanding and responding once an actual incident has occurred.
© 2026 ITBGM