Training

We have taken the following steps so far:
Understanding what a CSIRT is and what benefits it might provide. 
To what sector will the new team deliver its services to? 
What kinds of services a CSIRT can provide to its constituency. 
Analysis of the environment and constituents. 
Defining the mission statement. 
Developing the Business Plan.
a. Defining the financial model. 
b. Defining the organisational structure. 
c. Starting to hire staff. 
d. Utilising and equipping the office. 
e. Developing an Information security policy 
f. Looking for cooperation partners. 
Promoting the Business Plan.
a. Have the business case approved. 
b. Fit everything into a project plan. 
Making the CSIRT operational.
a. Creating workflows 
b. Implementing CSIRT tooling 

>> The next step is: training the staff

This section lists the two main sources for dedicated CSIRT training:

• TRANSITS courses and
• CERT/CC courses