CSIRT Requirements for Situational Awareness

The term situational awareness comes from the field of aviation. It describes the process of evaluating all the different environmental data around you and using it to make decisions. In the area of computer security, it refers to collecting the information around you, understanding how the information relates to and impacts your organization or constituency, and then, at the highest level, using this information to predict future activity. Situational awareness provides a context for decision making and specifically the context within which organizations prevent, detect, and respond to computer security threats and risks.