Abstract
In recent years, the cybercrime is increasing and construction of the strong information security is required in organizations, such as an enterprise, as a countermeasure against a cybercrime. Although the activity called as one CSIRT (Computer Security Incident Response Team) exists, spread is not fully progressing by factors, such as high cost structure. In this paper, in order to spread CSIRT activity, cancellation of the high cost structure which are the present main subjects is described. Specifically, reference is made about the aspect of practical use which is a key factor of the high cost structure of CSIRT, especially a human-resource-management method. Thus, a new human-resource-management method is proposed paying attention to the point that human resources also increase with the increase in a security incident. Here, the algorithm which combined the triage strategy of emergency care and the vulnerability assessment system evaluation basis of FIRST (Forum of Incident Response and Security Teams) is proposed. This contributes to high cost structure reduction of CSIRT.
