RFC 2350 — Expectations for Computer Security Incident Response (BCP 21)
RFC 2350 (BCP 21, 1998, updated by RFC 7942) describes the expectations of the Internet community regarding Computer Security Incident Response Teams (CSIRTs). It defines what a CSIRT should communicate about itself: mission, constituency, authority, policies, services, reporting procedures, and operating procedures.
Domains
Section 5 - Services
Section 4 - Policies
Section 3 - Charter
Section 2 - Contact Information
Section 1 - Document Information
Frequently Asked Questions
Map RFC 2350 — Expectations for Computer Security Incident Response (BCP 21) to any other framework
Use our AI-powered compliance platform to find control overlaps, gaps, and build remediation plans in seconds.