Governance

CERT/CSIRT

National or sectoral teams for cyber incident handling.

Definition

Organized teams (national and sectoral) responsible for operational incident management, coordination, threat intelligence sharing, and response activities across government and critical sectors. The policy assigns roles for a national CERT and sectoral CERTs to lead detection, analysis, and coordinated response to cyber incidents.