ITPEC FE Subject A April 2026 Question 33

CSIRT (Computer Security Incident Response Team) — the in-house team that receives, investigates and responds to security incident reports.

It is a generic term rather than one named body: a company, university or government agency each sets up its own, and the team handles reports of intrusions, malware and data leaks.

Answer (a)

Why not others:
- (b) — describes hacktivists, who pursue political or religious aims through IT
- (c) — describes the IETF, which produces Internet technical standards (RFCs)
- (d) — describes ICANN, which oversees IP address allocation policy and the DNS root

Key rule: CSIRT is defined by its function — incident response — and exists inside an organisation. The other options are all specific external bodies with unrelated mandates.

AI-generated — may contain errors