CSIRT Roles and Competences (Addendum)
Version 0.9.0 for review!
Also available in PDF
This document should be seen as an add-on to the existing FIRST CSIRT Services Framework. It helps to clarify the needs and requirements for CSIRT roles and will enable the quick(er) and more consistent writing of role descriptions. In addition it provides a clear overview of specific competencies that are important in handling the functions and tasks related to specific services provided.
The CSIRT Services Roles and Competencies supplemental document was developed using the original version of the NIST NICE Framework. For the initial task of the mapping roles to the FIRST CSIRT Services Framework services and functions, the SIG used work roles and tasks where appropriate, and competencies rather than the lower-level KSAs, which may be addressed later.
For each CSIRT services area the applicable roles are listed in alphabetical order and described in more detail. The text for each role includes the following fields:
- Description – Characteristics of the role context in the FIRST CSIRT Services Framework
- General Tasks – List of tasks for the role based on the context, services, and service area
- Associated Functions from FIRST CSIRT Services Framework – Reference to the specific functions
- Generic Competencies (from NICE) – List of competencies in reference to the NICE Framework categories not specific to the role
- Role-Specific Competencies (from NICE) – List of specific competencies for the role referenced to the NICE Framework categories
