Branden in grote gebouwen worden ontworpen: de oorzaak van brand mag dan een incident zijn, het verloop is dat nooit. We gaan ervan uit dat brand ontstaat, het is haast niet te voorkomen. Dat mag je een incident noemen. Brandontwikkeling echter is altijd voorzienbaar en voorspelbaar. Vooral brandgevolgen in grote gebouwen zijn link, die hebben de potentie voor veel slachtoffers. Maar ook de schade telt: aan gebouwen, aan milieu en leed aan vee.
MULTIFILE
Na incidenten zoals op Koninginnedag in Apeldoorn is er grote behoefte aan informatie over de slachtoffers. De autoriteiten krijgen die informatie echter maar lastig los van de ziekenhuizen.
Computer security incident response teams (CSIRTs) respond to a computer security incident when the need arises. Failure of these teams can have far-reaching effects for the economy and national security. CSIRTs often have to work on an ad hoc basis, in close cooperation with other teams, and in time constrained environments. It could be argued that under these working conditions CSIRTs would be likely to encounter problems. A needs assessment was done to see to which extent this argument holds true. We constructed an incident response needs model to assist in identifying areas that require improvement. We envisioned a model consisting of four assessment categories: Organization, Team, Individual and Instrumental. Central to this is the idea that both problems and needs can have an organizational, team, individual, or technical origin or a combination of these levels. To gather data we conducted a literature review. This resulted in a comprehensive list of challenges and needs that could hinder or improve, respectively, the performance of CSIRTs. Then, semi-structured in depth interviews were held with team coordinators and team members of five public and private sector Dutch CSIRTs to ground these findings in practice and to identify gaps between current and desired incident handling practices. This paper presents the findings of our needs assessment and ends with a discussion of potential solutions to problems with performance in incident response. https://doi.org/10.3389/fpsyg.2017.02179 LinkedIn: https://www.linkedin.com/in/rickvanderkleij1/
MULTIFILE