Georgia Killcrece


Georgia Killcrece is a member of the technical staff in the CERT® Coordination Center (CERT/CC), part of the Networked Systems Survivability (NSS) Program based at the Software Engineering Institute(SEI) at Carnegie Mellon University in Pittsburgh, Pennsylvania. She has managed the CERT® CSIRT Development Team since 1999 and has been a member of the team since 1996. The team takes an active role in assisting new and existing computer security incident response teams (CSIRTs) worldwide to develop their incident handling capabilities. Killcrece has worked directly with a variety of organizations (government, industry, and academia) across various stages of their CSIRT development: education/training, planning, implementation, operation, collaboration. She is also involved in the development and delivery of public and onsite training courses, and is one of a few instructors at the Software Engineering Institute who regularly teaches the suite of 5 CSIRT courses. Recently, Killcrece and her team completed a program to license the CSIRT training materials to transition partners; part of a broader outreach effort in the CSIRT community. Jointly, the team has published other documents on CSIRT activities (available on the CERT web site at to extend the availability of information for organizations establishing their own response team. Prior to becoming leader of the CSIRT Development Team, Killcrece was a technical coordinator and incident response coordinator in the CERT Coordination Center from 1994 to 1999. In those roles, she gained first-hand knowledge of the processes involved in forming, operating, and evolving incident response teams, including the dynamics of working in a fast-paced team environment. Her primary responsibilities included handling computer security compromises and vulnerability reports. As a part-time member of the Information Services team in the Networked Systems Survivability program, Killcrece also contributed to the development and maintenance of CERT/CC materials published on the CERT website. Killcrece is a co-author or contributor to papers and reports relating to computer security incident response teams, including Creating a Computer Security Incident Response Team: A Process for Getting Started, CSIRT Services, CSIRT Frequently Asked Questions and the forthcoming second edition of the Handbook for Computer Security Incident Response Teams(CSIRTs). Other upcoming publications include Organizational Models for CSIRTs and State of the Practice of Computer Security Incident Response Teams scheduled for release in the second quarter of 2003. Killcrece can be reached directly by email at [email protected] or via the CSIRT training alias at [email protected].