Roles & Functions

Reactive

• Provide a single point of contact for reporting local problems.
• Assist the computing community in preventing and handling computer security incidents.
• Share information with CSIRT/CC, other CERTs, response teams ,    organisations and sites.
• Incident Response.
• Provide a 24 x 7 security service.
• Offer recovery procedures.
• Artifact analysis
• Incident tracing

Proactive

• Issue security guidelines, advisories and timely advise.
• Vulnerability analysis and response
• Risk Analysis
• Collaboration with vendors
• National Repository of, and a referral agency for, cyber-intrusions.
• Profiling attackers.
• Conduct Training
• Interact with vendors and others at large to investigate and provide solutions for incidents.

Reporting

• Central point for reporting incidents
• Database of incidents

Analysis

• Analysis of trends and patterns of intruder activity
• Develop preventive strategies for the whole constituency
• In-depth look at an incident report or an incident activity to determine the scope, priority and threat of the incident.

Response

• Incident response is a process devoted to restoring affected systems to operation
• Send out recommendations for recovery from, and containment of damage caused by the incidents.
• Help the System Administrators take follow up action to prevent recurrence of similar incidents