Handbook for Computer Security Incident Response Teams (CSIRTs) (2d ed. Apr. 2003) (full-text).
This handbook provides guidance about the generic issues to consider when forming and operating a CSIRT. In particular, it helps an organization to define and document the nature and scope of a computer security incident response service, which is the core service of a CSIRT, as well as examine how to create the CSIRT policies and procedures.