CSIRT Foundation

Earners of the CSIRT Foundation certification have demonstrated foundational knowledge of planning, implementing, and building an effective Computer Security Incident Response Team (CSIRT). This certification confirms that the candidate has the foundational knowledge to plan, implement, and build an effective Computer Security Incident Response Team (CSIRT). The CSIRT Foundation exam is based on the Create a CSIRT white paper and CSIRT Frequently Asked Questions (FAQ) published by CERT Division of the Software Engineering Institute. The exam covers topics such as best practices for planning, implementing, and building an effective Computer Security Incident Response Team (CSIRT). Earning criteria: To earn the CSIRT Foundation certification candidates must successfully pass the ITC-003: CSIRT Foundation exam - Foundational level. A score of 70% or higher is required to pass the exam. The ITC-003: CSIRT Foundation exam is a closed-book and remotely proctored exam. ITCERTS recommends that candidates have at least 6 months of work experience in creating and managing a CSIRT before sitting for the exam. This certification is considered good-for-life and does not expire.