What term describes the team made up of a manager, cyber security personnel, a representative from legal counsel, and possibly someone from public relations or human resources, depending on the type and severity of the incident?

What term describes the team made up of a manager, cyber security personnel, a representative from legal counsel, and possibly someone from public relations or human resources, depending on the type and severity of the incident?

• A. Cyber Security Incident Response Team (CSIRT)
• B. Microsoft Incident Response Team (MIRT)
• C. Mission Essential Functions (MEFs)
• D. Privacy Impact Assessment (PIA)

Answer: (A)

The situation describes a cross-functional group that can coordinate technical containment with legal, regulatory, and communications considerations during an incident. A manager oversees the response, cybersecurity personnel handle investigation and remediation, a representative from legal counsel addresses breach reporting and compliance, and a public relations or human resources liaison manages communications and internal/external impact as needed. This blend of roles is what a Cyber Security Incident Response Team (CSIRT) is designed to be. The other terms refer to different concepts: a Microsoft Incident Response Team would be specific to Microsoft environments, Mission Essential Functions relate to maintaining critical operations during disruptions, and Privacy Impact Assessment is about evaluating privacy risks, not forming an incident response team.

The situation describes a cross-functional group that can coordinate technical containment with legal, regulatory, and communications considerations during an incident. A manager oversees the response, cybersecurity personnel handle investigation and remediation, a representative from legal counsel addresses breach reporting and compliance, and a public relations or human resources liaison manages communications and internal/external impact as needed. This blend of roles is what a Cyber Security Incident Response Team (CSIRT) is designed to be.

The other terms refer to different concepts: a Microsoft Incident Response Team would be specific to Microsoft environments, Mission Essential Functions relate to maintaining critical operations during disruptions, and Privacy Impact Assessment is about evaluating privacy risks, not forming an incident response team.