What services does a PA-CSIRT provide?
A. PA-CSIRT’s main objective is Incidence Handling. Incident handling includes three functions: incident reporting, incident analysis, and incident response. The incident reporting function enables PA-CSIRT to serves as a central point of contact for reporting problems. This allows local computer and especially internet users and system administrators to report all security incident issues and activities to PA-CSIRT. Incident analysis involves taking an in-depth look at an incident report or incident activity to determine the scope, priority, and threat of the incident, along with researching possible response and mitigation strategies. Incident response functions can take many forms. PA-CSIRT may send out recommendations for recovery, containment, and prevention to users or systems and network administrators who then perform the response steps themselves. The response may also involve sharing information and lessons learned with other response teams and other appropriate agencies, org
