As with any formal effort, developing the CSIRT requires a formal plan, which encompassesthe scope and responsibilities of the team as well as its reporting structure and functionalprocesses. What items should this plan address?0 Time frame for development of CSIRS° Gap analysis of needed versus available personnel resources (skills)° CSIRT structure and team model° Available and needed funding for initial and ongoing CSIRT operations° Training and testing methods and requirements for the CSIRT° Formal and informal communications requirements between the CSIRT and existingIT-"InfoSec operations, organizational management, and other responsible individuals° Procedures for updating and modifying CSIRT documents and activities, includingfindings from training and testing methods-