Grid Computing has often been heralded as the next logical step after the World Wide Web. Although it is often compared to the World Wide Web, it is vastly more complex both in organisational and technical areas. It has been argued "that CSIRT activities [i.e. security and incident response] for a Grid are not fundamentally different from those performed by a traditional CSIRT." In practice, there are many challenges to be overcome to establish a CSIRT for the specific needs of Grids and Grid users. In the organisational field, CSIRTs have to learn that while Grid communities are technically already part of a teams constituency, serveral problems regarding security requirements, organisational structures, terminology, have to be overcome to efficiently communicate and cooperate. To handle the technical part of Grid incidents as well as to be able to proactively help sites in securing their Grid infrastructure, a CSIRT has to develop not only an understanding about the Grid middleware used in the Grids of their constituency. Additionally, Grid systems and structures are build and operated on top of as well as shared with traditional systems and software in a computing center. Unterstanding the issues arising from the interaction is also vital to providing efficient incident response and security servicey. With this understanding, more advanced services like Grid-honeypots or specific intrusion detection signatures for Grids may be build in the future.