I have found these resources make an excellent starting point for gaining foundational understanding of what an effective CERT/CSIRT team looks like and the many ways it can be structured depending on the organization's needs/limitations.
http://grandstreamdreams.blogspot.com/2015/02/time-to-set-up-certcsirt-yes.html?utm_content=buffer09b9e&utm_medium=social&utm_source=twitter.com&utm_campaign=buffer&m=1From My iPhone