[&] In what context are CERT teams most likely to operate? - Coordinating across multiple organizations at a national level - Within individual companies as technical operational teams - Handling physical security breaches only - As part of a security operations center for threat detection [&] What is the main focus of a CERT (C-E-R-T)? - Internal incident response within a single organization - National or sector-wide threat intelligence and coordination - Primarily proactive incident prevention - Exclusive focus on IT-related incidents [&] What does CSIRT stand for? - Comprehensive Security Incident Response Team - Certified Security Incident Response Team - Cyber Security Incident Response Team - Computer Security Incident Response Team