PSIRT
A Practitioner’s Field Guide: the complete three-volume set
Each volume stands alone, with its own index. Read in order — Learn, Run, Operate — or take the one you need.
Standing up and running a product security incident response function. The three volumes cover building and running the function, the advanced practice and hard cases, and the templates and decision trees that carry the work.
Companion to the PSIRT Response toolkit — the assessment and ready-to-use templates that put this book to work.
From the blog: Receiving your first vulnerability report · What the Cyber Resilience Act asks of a small software company — essay-length previews of the same ground this set covers, free.
Building and Running the Function
Volume 1 of the three-volume PSIRT set: building and running the product security incident response function, covering what a PSIRT is, the response playbook, workflow and escalation, building the function from scratch, the first 72 hours, researcher relationships, coordinated vulnerability disclosure, third-party risk and SBOM, CVE and CVSS practice, the advisory library, communications, forensics, and cyber insurance, with the hiring, capability, and metrics set as Appendix A. Volume 2 covers advanced practice and the case studies; Volume 3 is the Operator's Workbook. Each volume stands alone. Each is modestly priced in ebook.
Advanced Practice and the Hard Cases
Volume 2 of the three-volume PSIRT set: advanced practice and the hard cases, covering bug bounty operations, PSIRT for AI/ML systems, PSIRT for open-source maintainers, tabletop exercises, AI-assisted operations, pre-disclosure list management, and the sustained case studies, closing with the maturity model, with the sector overlays, bounty-transition playbook, and Five Commandments poster as Appendix A. Volume 1 covers building and running the function; Volume 3 is the Operator's Workbook. Each volume stands alone. Each is modestly priced in ebook.
The Operator's Workbook
Volume 3 of the three-volume PSIRT set: the Operator's Workbook, holding disclosure and policy templates, triage decision trees and scoring, communication template libraries, the multi-jurisdiction regulatory reference, and the pre-positioning and post-incident set, plus the template finder with tier manifests, the PSIRT maturity rubric, and the glossary. Volume 1 covers building and running the function; Volume 2 covers advanced practice and the case studies. Each volume stands alone. Each is modestly priced in ebook.
The set at a glance
Swipe sideways to see the full table →
| Volume | Pages | Depth | ISBN | Price |
|---|---|---|---|---|
| Volume 1 | 327 | 15 chapters | TBD | TBD |
| Volume 2 | 330 | 17 chapters | TBD | TBD |
| Volume 3 (Workbook) | 327 | 6 chapters | TBD | TBD |
Where to buy
PSIRT will be available in paperback, hardcover, and ebook through print-on-demand retailers, each volume sold separately. The links activate the moment the titles list; until then, email us and we’ll tell you at launch.
Cover art, pricing, and availability are not yet final and will be updated when these titles are listed for sale. Books are sold through print-on-demand retailers (KDP, IngramSpark, Amazon, and independent bookstores) — not through the Sylvan Assurance toolkit store.