Name
URL
Carnegie Mellon
http://www.cert.org/csirts/Creating-A-CSIRT.html
SANS
http://www.sans.org/reading_room/whitepapers/incident/creating-managing-incident-response-team-large-company_1821
http://www.sans.org/reading_room/whitepapers/incident/building-incident-response-program-suit-business_627
Gartner (paid)
http://www.gartner.com/id=1389613
3.15.14.98