ENHANCING CYBERSECURITY INCIDENT RESPONSE: A STRUCTURED APPROACH TO CSIRT ROLE ALLOCATION

Hamd, Hosamaldeen

IJISCS (International Journal of Information System and Computer Science)
Vol 9, No 2 (2025): IJISCS (International Journal of Information System and Computer Science)

The process of responding to cyber incidents requires professional skills and standardized methods. Incident responders often face challenges in determining who is responsible for addressing cybersecurity incidents. Consistence between incident response team members is crucial for two reasons: first, to eradicate and fix the incident effectively; second, to save time and effort. This paper proposes a model for distributing roles within an Incident Response (IR) team. Each member is assigned both basic and shared responsibilities to ensure comprehensive coverage. Three main roles are identified-Risk Analysis, Alerts and Warnings, and Security Consultant-which are designed as universal roles adaptable to teams of any size.