CERT/CC is best described as which type of organization?

• A. A nongovernmental entity focused on computer security incidents involving the Internet
• B. A federal agency within DHS
• C. A private sector cybersecurity vendor with no incident reporting mandate
• D. An international regulatory body

Answer: (A)

The main idea is recognizing what CERT/CC is: a nongovernmental, nonprofit coordination and research center focused on computer security incidents on the Internet. It operates within Carnegie Mellon University’s Software Engineering Institute and acts as a central hub for incident reporting, analysis, and cross‑organization coordination. It collaborates with government, industry, and academia to share information, publish advisories, and help improve responses to cyber incidents. It’s not a federal agency, nor a private sector vendor with a sales mandate, and it isn’t an international regulatory body. While it works closely with government and other partners, it does not impose reporting requirements; it provides guidance and coordination to enhance Internet security.