Product Security Incident Response Team (PSIRT) Overview – Video Course

In this section, we will define the contents of the video course, the importance of PSIRT, and the learning objectives.

II. Background

Learn what FIRST is and what its background is, as well as the series of events that led to the creation of the PSIRT framework.

III. Why is it important?

Recognize the importance of preparing for incidents based on the prevalence of cyberattacks in the automotive industry, as well as how exactly the PSIRT framework supports organizations.

IV. PSIRT Operation models

Understand the different PSIRT models including distributed, centralized, and hybrid models. An explanation and recommendations will be provided for each.

V. PSIRT Structure

Get an overview of the PSIRT structure, how each of them help define the inner workings of the PSIRT, and introduce the service areas including the operational foundation and vulnerability discovery.

VI. Operational foundation

Get a more detailed explanation on the PSIRT’S operational foundation, including what components it describes and how they are classified.

VII. Stakeholder ecosystem management

Learn what the stakeholder ecosystem management PSIRT’s service area describes, as well as important considerations.

Comprehend the importance of providing trainings and education, in addition to key considerations to keep in mind.

IX. Vulnerability Discovery

Here, you will learn what the vulnerability discovery service area describes, what must be collected, and how it supports vulnerability management.

X. Vulnerability Triage and Analysis

Understand the purpose of vulnerability triage and analysis, as well as recommendations for handling triage and further considerations.

XI. Remediation

Know the objective of the remediation service area, what it should include, and how it should be determined.

XII. Vulnerability disclosure

Recognize the importance of the vulnerability disclosure, how it is formed, and important considerations.

XIII. Example on PSIRT usage within the automotive industry

Get a visual overview of the PSIRT function in the automotive industry, considering the aforementioned steps and service areas, as well as how it is related to CSMS and SUMS processes.

XIV. Product Security Incident Response Team (PSIRT) Overview – Sum up

Get a summary of the main lessons learned during this Product Security Incident Response Team (PSIRT) video course.