1. Building Security Incident
Response Team and
Its Competency
Didik Partono Rudiarto

2. Traditional Security No Longer Works

3. PERSONAL SKILLS
TECHNOLOGY SKILLS

4. Personal Skills

5. Communication
Presentation Skill
Diplomacy
Ability to Follow Policies and Procedures
Team Skills
Integrity
Knowing One's Limits
Coping with Stress
Problem Solving
Time Management

6. Technical Skills

7. Technical Foundation

8. Security Principles
Security Vulnerabilities/Weaknesses
Risk
Network Protocol
Network Application & Services
Network Security Issues
Host/System Security Issues
Malicious Code
Programming Skills

9. Incident Handling

10. Local Team Policies and Procedures
Understanding/Identifying Intruder
Techniques
Communicating with Sites
Incident Analysis
Maintenance of Incident Records

11. Skills &
Competency
Requirements

12. Cyber Security Skills Framework
INTRUSION
ANALYSIS
FORENSIC
INCIDENT
HANDLING
NETWORK
SECURITY
APPLICATION
SECURITY
PENETRATION
TESTING
FOUNDATION
AUDIT
& RISK
MANAGEMENT
MANAGEMENT
SYSTEM
ADMINISTRATION
LEGAL

13. IT Security Roadmap
Role-based
Specialist
IT Fundamentals
0 – 1 Years
Experience
IT Security
Fundamentals
1 – 2 Years
Experience
• Network
Administrator
• IT Security Specialist
• IT Security Manager
> 3 Years
Experience

14. Standards

15. Information Security Certification
ORGANIZATION
CompTIA
EC-Council
GIAC
ISACA
(ISC)2
ISECOM
Offensive Security
Mile2
CREST
IACRB
eLearnSecurity
Security Certified
Brainbench
CIW
CWNP
Cisco Systems
Symantec
CheckPoint
Microsoft
CERTIFICATION
Security+
CEH, CHFI, ECSA, ECSP, ENSA, LPT
GSIF, GSEC, GCIA, GCFW, GCFA, GCIH, GPEN, GCUX, GCWN, GWAPT, GAWN, GREM, GSE
CISA, CISM, CGEIT, CRISC
CAP, CISSP, CSSLP, ISSAP, ISSEP, ISSMP, SSCP
OPST, OPSA, OPSE, OWSE
OSCP, OSCE
CPTE, CPT Consultant
CREST Consultant
CPT, CEPT
eCPPT
SCNS, SCNP, SCNA
BITSF, BISA
CWSA, CWSS, CWSP
CWTS, CWNA, CWSP
CCNA Security, CCSP, CCIE Security
SCS
CCSA, CCSE, CCMSE, CCSEPE, CCMA
MCSA Security

16. Function vs Certification
Career Level
IT Executive
IT Manager
Required Skills
Security Design and
Compliance Skills
Vendor Specific
Specialized
Security Skills
Vendor Neutral
IT Admin
Network
Security Skills
IT Worker
Information
Worker
Basic Security
Concept
Foundation Security
Knowledge
Certifications

17. THANK YOU