Providing the Optimal Structure of Computer Emergency Response Teams Based on Service And Process

Today, with the growth and development of information technology, infrastructures and information systems in an organization are based on cyber space. According to the definition of non-operational defense organization, cyber space is interdependent networks that consist of information technology infrastructure, communication networks, computer systems, controllers of critical industries, virtual environment, information and interaction between this environment and humans in order to produce, Process, store, exchange, retrieve and exploit information is useful, but it is prone to many risks. As a result of negligence and failure to take care of the threats of this network, it is possible to lose information and assets. In order to respond to incidents in this regard in the shortest possible time, it is necessary to set up a team to respond to computer security incidents in every organization; So that the network can be controlled and unauthorized attacks and intrusions can be detected in a reliable platform. It also increased the response speed in the shortest possible time with optimal communication between components. For this purpose, in this research, relying on the method of comparative studies, the required data were extracted in this regard. Then, regarding the structure, services and processes of cert centers, questions were formulated and raised in the field survey meetings with experts in this field; The results of this analysis are presented in this research article in the form of a favorable situation by providing a service-based structure and examining the main processes of these centers. In this document, after presenting the organizational structure, this structure has been re-divided based on the type of services and the units responsible for providing these services have also been specified in this proposed model. In the following, the steps and operational processes of each of these units have been introduced.