- NIST SP 800-61 Rev 2, Computer Security Incident Handling Guide, at https://csrc.nist.gov/publications/detail/sp/800-61/rev-2/final
- ENISA Incident Handling in Live Role Playing Handbook, at https://www.enisa.europa.eu/topics/trainings-for-cybersecurity-specialists/online-training-material/documents/incident-handling-in-live-role-playing-handbook/view
- Incident Handler's Handbook by Patrick Kral, SANS Reading Room, at https://www.sans.org/reading-room/whitepapers/incident/incident-handlers-handbook-33901
- MITRE Ten Strategies of a World-Class Cybersecurity Operations Center, at https://www.mitre.org/sites/default/files/publications/pr-13-1028-mitre-10-strategies-cyber-ops-center.pdf