Skip to main content
Offline·Progress is saved on this device and syncs the next time you open the app online.
Security Operations & Monitoring

CIRT

Computer Incident Response Team

The designated team that detects, analyzes, and responds to security incidents.

A CIRT is the designated team that detects, investigates, contains, and recovers from security incidents, executing the organization's incident response plan. It draws on members from security, IT, legal, and communications so that technical and business aspects are addressed together. The acronym is largely synonymous with CERT and CSIRT, differing mainly by organizational preference. Defining the team, its roles, and escalation paths in advance is essential, since improvising these during an active incident wastes critical time.

Related terms

Looking CIRT up is step one. Getting tested on it is step two.

A free account opens all 4 Domain 1 objectives, 271 exam-style questions with a lesson and a lab on each, a placement check that skips what you already know, and a dated plan. No card.

Not affiliated with or endorsed by CompTIA.