Building and Managing a CSIRT and SIRT Course

What is this course for?

Structure, processes and operation of incident response teams.

🚀 CSIRT/SIRT Fundamentals: Learn the differences between a CSIRT, SIRT and CERT, and their typical services.
🚀 Team Design and Formation: Define the team's mission, structure and executive sponsorship.
🚀 Processes and Operational Capabilities: Design the CSIRT's processes, tools and service level agreements.
🚀 Collaboration and Trust Networks: Take part in CSIRT communities and share threat information.
🚀 Team Maturity and Assessment: Assess the team's maturity with models such as SIM3 and plan its improvement.


Course	Building and Managing a CSIRT and SIRT Course
Learning path	CyberGuardián
Domain	ADR — Cybersecurity Analysis, Detection and Response
Level	Advanced
Aimed at	Organizational security specialists and leads
Prerequisites	We recommend completing the CyberUsuario learning path first
Format	Online, self-paced
Language	Spanish (English translation available)
Modules	5
Lessons	15
Estimated reading time	~10 minutes (not counting practice or assessment)
Material	Text lessons and a downloadable course diagram (Excalidraw)
Content access	Free: open, open-source content (MIT license)
Assessment	Online, 60 minutes, at least 80% correct answers, 2 attempts. Requires a subscription
Diploma	Yes, when you take the assessment on the DivisionCero platform
Certification	Included in the diploma, verifiable online with a QR code or certification code
Learning path certification	Counts toward the ADR domain certification and CyberGuardián Certified
Last updated	19/09/2026
Course link	cyberacademy.divisioncero.com/adr/creacion-y-gestion-de-un-csirt-y-sirt

Open, open-source content on CyberAcademy.