A product security incident response team (PSIRT) identifies, evaluates and coordinates responses to the security vulnerabilities in the products you manufacture. A PSIRT is not an island in your company; it does not operate independently of other parts of the organization. The most common embedding models are very similar to typical CSIRT structures. The funding model can include selling services to other internal teams: Your PSIRT can deliver vulnerability assessment or code testing that you might otherwise outsource to an external partner.”]
Source: https://securityintelligence.com/is-it-time-to-start-a-psirt-why-your-csirt-may-not-be-enough/