Technical Infrastructure of a CSIRT

The goal of this paper is very specific, provide a guide to build a technical infrastructure for a computer security incident response team (CSIRT) work, it does not cover the complete process of creating a CSIRT. This paper provides guidance for people interested to build a CSIRT team, who wants acknowledgement of the necessities, equipment used, tools, mechanisms, and costs implied. It also provides an example from a CSRIT in operation, CERT.PT, it describes the technical infrastructure of the Portuguese National Educational and Research Network (NREN) CSIRT that could be very useful to compare and improve other academic or commercial organizations