Upload
yahya-nursalim
View
232
Download
0
Embed Size (px)
Citation preview
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 1/40
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 2/40
respond to incidents
perform analysis tasks
communicate effectively with your constituency
competent problem solversmust easily adapt to change
must be effective in their daily activities
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 3/40
mission and goals (of the CSIRT)
nature and range of services offered
available staff expertise
constituency size and technology base
anticipated incident load
severity or complexity of incident reports
funding
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 4/40
Personal Skills
Technical Skill
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 5/40
Personal Skills
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 6/40
Communication
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 7/40
Presentation Skill
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 8/40
Diplomacy
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 9/40
Ability to follow
Policies and
Procedures
Compliance
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 10/40Team Skills
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 11/40
Integrity
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 12/40
Knowing One's Limits
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 13/40Coping with Stress
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 14/40
Problem Solving
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 15/40
Time Management
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 16/40
Technical Skills
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 17/40
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 18/40
Technical
Foundation
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 19/40
Security Principles
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 20/40
Security
Vulnerabilities/Weaknesses
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 21/40
The Internet
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 22/40
The Risks
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 23/40
Network Protocols
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 24/40Network Applications and Services
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 25/40
Network Security Issues
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 26/40
Host/System Security Issues
M li i C d
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 27/40
Malicious Code(Viruses, Worms, Trojan Horse programs)
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 28/40
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 29/40
Incident
Handling
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 30/40
Local Team Policies and Procedures
U d di /Id if i
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 31/40
Understanding/Identifying
Intruder Techniques
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 32/40
Communicating with Sites
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 33/40
Incident
Analysis
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 34/40
Maintenance of Incident Records
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 35/40
P e r s o n
a l S k i l
l sCommunication
Presentation Skill
Diplomacy
Compliance
Team Skill
IntegrityKnow the limits
Coping with Stress
Problem Solving
Time Management T
e c h n i c a l S k i l
l sTechnical Foundation
• Security Principles
• Security Vulnerabilities/Weaknesses
• The Internet
• Risks
• Network Protocols
• Network Applications and Services
• Network Security Issues
• Host/System Security Issues
• Malicious Code (Viruses, Worms,Trojan Horse programs)
• Programming Skills
Incident Handling
• Local Team Policies and Procedures
• Understanding/Identifying IntruderTechniques
• Communicating with Sites
• Incident Analysis
• Maintenance of Incident Records
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 36/40
IT Security Roadmap
IT FundamentalsIT Security
Fundamentals
Role-basedSpecialist
• NetworkAdministrator
• IT Security Specialist
• IT Security Manager
0 – 1 Years
Experience
1 – 2 Years
Experience
> 3 Years
Experience
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 37/40
Function vs Certification
Security Design and
Compliance Skills
SpecializedSecurity Skills
Network
Security Skills
Basic Security
Concept
Foundation Security
Knowledge
Vendor Specific
Vendor Neutral
Information
Worker
IT Worker
IT Admin
IT Manager
IT Executive
Career Level Required Skills Certifications
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 38/40
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 39/40
DoD Information Assurance (IA)
Workforce Strategy
• Improved IA posture
• Increased confidence that personnel performing IA functions are capable of doing the job
• Mechanism in place to “raise the bar” on IA skills
Certify theWorkforce
• Ability to place trained/capable personnel in IA jobs
• Ability to define standard IA personnel requirements
Manage theWorkforce
• Personnel enabled to hone IA skills, keep up with latest technology, threats andvulnerabilities
Sustain theWorkforce
• Local commanders understand impact of IA on mission accomplishment
• Standard allies and coalition partners can emulate IA for other workforces(acquisition, legal, audit etc.)
Extend theDiscipline
7/30/2019 Skills & Competency for CSIRT
http://slidepdf.com/reader/full/skills-competency-for-csirt 40/40
Didik Partono Rudiarto
Tim Ahli ID-SIRTII