CERTs can operate within individual organizations or at a national or sector level. They coordinate incident response, share threat intelligence, and help organizations recover from attacks. The term is often used interchangeably with CSIRT. CERTs play a key role in the broader security ecosystem by facilitating information sharing about new threats and coordinating cross-organization responses to major incidents.