Establishing a computer security incident response capability (CSIRC) | lit.salon