1. C. Alberts, A. Dorofee, G. Killcrece, R. Ruefle, and M. Zajicek. Defining incident management processes for csirts: A work in progress, 2004.
2. D. Botta, K. Muldner, K. Hawkey, and K. Beznosov. Toward understanding distributed cognition in it security management: the role of cues and norms. Cognition, Technology & Work, 13(2):121--134, 2011.
3. J. S. Brown and P. Duguid. Knowledge and organization: A social-practice perspective. Organizational Science, 12(2):198--213, 2001.
4. P. Dourish and G. Bell. Divining a digital future: mess and mythology in ubiquitous computing. MIT Press, 2011.
5. I3P. Improving csirts. http://www.thei3p.org/research/csirt.html.