9. The 411 on PSIRTs and the Incident Response Framework

If there is an issue with product security, who responds to it? That would be a PSIRT, or Product Security Incident Response Team! Tom and Camille talk with Pete Allor, Director for Red Hat Product Security, about PSIRTs and the incident response framework. It’s a discussion all business executives won’t want to miss! The three cover what a PSIRT is and why you need one, the dangers of falling into a technical trap when addressing product vulnerabilities or problems, evaluating risk and scoring vulnerability, why incident response requires organization-wide coordination and communications, the Incident Response Services framework, the role of transparency, and more. The views and opinions expressed are those of the guests and author and do not necessarily reflect the official policy or position of Intel Corporation.