---
title: "CIR Team: Cybersecurity Coverage by IT Teams"
description: BCM & CIR - What Are the Typical IT Teams Handling Security for IT? Cybersecurity Coverage by IT Teams
image: https://blog.bcm-institute.org/hubfs/Manager%20Guide%20to%20BCM%20for%20Cyber%20Security%20Incidents/C3%20Typical%20IT%20Teams%20Handling%20Cybersecurity/Morepost/IC_CIR_Type%20of%20Coverage%20by%20IT%20Teams.png
---
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
##### Cybersecurity Series
# CIR Team: Cybersecurity Coverage by IT Teams
An organization depending heavily on IT infrastructure tends to have a team designated to monitor the security of applications, software, and hardware.
The objective is to compare the organization's information security, cyber security, and IT security teams. While these three teams may have overlapping roles and responsibilities, their objectives may differ drastically. Ultimately, the detailed review of the three groups will guide any organization on which type of team suits them.
Reference: Chapter 3 What Are the Typical IT Teams Handling Security for IT? 3.2 Coverage Based on Type
[Moh Heng Goh](https://blog.bcm-institute.org/cyber-security/author/moh-heng-goh) Nov 13, 2022
### 
### CIR Team
#### IT Teams Dealing with Cybersecurity
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/c1170d3d-3184-43b6-9388-b0da204bfcbe)An organization depending heavily on IT infrastructure tends to have a team designated to monitor the security of applications, software, and hardware.
The objective is to compare the organization's information security (Infosec), cyber security (CS), and IT security (IT Sec) teams (Figure showing the "Three Types of Teams Dealing with Cyber Security"). While these three teams may have overlapping roles and responsibilities, their objectives may differ drastically.
Ultimately, the detailed review of the three teams will guide any organization on which type of team suits them.
Three Types of Teams Dealing with CyberSecurity
#### Type of Coverage by Teams
To understand the current types of teams deployed within a typical organization, organisations must understand their respective scope and coverage (CCM, 2017) for their IT team to deal with cyber security.
The “IT” attached to the team may be misleading; an organization may not have the actual means of dealing with cyber security incidents despite having a designated IT team present.
If any IT team's coverage (Rouse & Teravainen, 2016) does not include the development and maintenance of a CIR plan, the organization’s cyber security program is a simple one at best, a crippling incident waiting to happen at worst.
Thus, forming a team that covers multiple (or missing) aspects from the *Figure* below can contribute significantly to effective cyber security response.
| **Coverage** | **InfoSec** | **IT Sec** | **CS** |
| --- | --- | --- | --- |
| Processes and facilities are utilized to protect physical and virtual information. - Confidentiality – information disseminated/ allowed access to relevant parties - Integrity – information is not modified/ tampered with by unauthorized personnel. - Availability – information can be accessed by authorized personnel anytime, anywhere. | ✓ | ✓ | - |
| Protect organizations against cyber security threats | - | - | ✓ |
| Information/ Data | ✓ | - | - |
| Information/ Data and facilities that utilize them | - | ✓ | ✓ |
| Protect against unauthorized attacks/ access | ✓ | ✓ | ✓ |
| Detection, Monitoring, Mitigation, Response | ✓ | ✓ | ✓ |
Coverage of IT Security Activities Based on Teams
#### Related Concept to Cybersecurity Coverage by IT Teams
| **Type of Coverage by IT Team** | **Team Composition** | **Maintain Strong Cybersecurity Processes and Functions** | **Skill Sets and Long-Term Challenges** | **Back To: Team Handling CIR** |
| --- | --- | --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/c1170d3d-3184-43b6-9388-b0da204bfcbe) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/38084e57-167b-4ce1-8790-41c616e9fa48) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/ab1de46c-26c8-4976-aa96-44864af4414f) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/216e0219-0a45-4c9b-8965-5cef14f74a3b) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/467da0ee-d48a-4818-a3a1-59ff7aceade8) |
---
#### 
#### Do You Want to Continue BCM Training onsite or online?
| **Competency-based Course** | **Certification Course** | | |
| --- | --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/685c93a7-08d2-4175-bee7-71781494334e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/95fc21bd-88bf-43d8-9464-5b00190d76e0) | [![\[BL-3-Catalog\] What Specialist Level Blended Learning Courses that are Available?](https://no-cache.hubspot.com/cta/default/3893111/4b22a53c-6e3e-4b9e-8c2a-888423f1d26c.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/4b22a53c-6e3e-4b9e-8c2a-888423f1d26c) | [![\[BL-5-Catalog\] What Expert Level Blended Learning Courses that are Available?](https://no-cache.hubspot.com/cta/default/3893111/fe175db3-7f57-4636-bf09-e9a836aa5478.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/fe175db3-7f57-4636-bf09-e9a836aa5478) |
#### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/2a55f179-a251-4490-bd1c-856467aea198)
Goh, M. H. (2017). A Manager's Guide to Business Continuity Management for Cyber Security Incidents, 2nd Edition. GMH Pte Ltd.
Reference: Chapter 3 What Are the Typical IT Teams Handling Security for IT? 3.2 Coverage Based on Type
Note: This version was the draft 2nd Edition being updated in 2023. The numeric in the square bracket \[X-X\] cross-refers to the actual chapter and section in the 1st Edition.
#### **Comments:**
### More Posts
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/04334171-099a-49e5-becc-c8c082c7947f)
All rights reserved. Copyright 2026
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Moh Heng Goh",
"url" : "https://blog.bcm-institute.org/cyber-security/author/moh-heng-goh"
},
"dateModified" : "2022-11-25T13:29:04.629Z",
"datePublished" : "2022-11-13T07:50:01.000Z",
"headline" : "CIR Team: Cybersecurity Coverage by IT Teams",
"mainEntityOfPage" : {
"@id" : "https://blog.bcm-institute.org/cyber-security/cybersecurity-coverage-by-it-teams",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
},
"name" : "BCMI Pte Ltd"
}
}
```