current computer security incident response team (CSIRT) technical staff with three to six months incident handling experience system and network administrators responsible for identifying and responding to security incidents