In the modern networked world, the most applicable criteria of operation evaluation are “Quality” and “Speed”. These two criteria are cornerstones of the Security Teams operation that make the high quality security research for different incidents through large amount of data and users. This fact makes the work of any security team difficult and has many hidden aspects that are impossible to be handling with the necessary level of quality. The only one solution of simplifying this complicated work is to automate the process using different monitoring, ticketing and accounting tools. In this article will be presented an overview of the existing and planned for implementation tools that can be effectively used in various CERTs, especially which operate in Research and Educational networks.