What is a CSIRT or CERT?

A CSIRTCSIRT: computer security incident response team. The national team to which serious incidents are reported. (Computer Security Incident Response Team), also called a CERT, is a team that handles security incidents. Every EU country has a national CSIRT, and under the NIS2NIS2: the EU's second Network and Information Security directive. The EU cybersecurity law (Directive (EU) 2022/2555) that sets security and incident-reporting duties for many companies. Directive companies in scope report significant incidents to their CSIRT or competent authority: an early warning within 24 hours, a fuller notification within 72 hours and a final report within a month. National CSIRTs also publish warnings about vulnerabilities being exploited, which are worth subscribing to. Large companies sometimes have their own internal CSIRT. NetSenX tracks NIS2 reporting deadlines on every plan.

← All 69 questions on What is…? Network and security termsAll topics