2017 was a very challenging year for Cyber Security. The end of the year top stories would be led by WannaCry, Petya and many other cyber assaults that affected infrastructures in more than one country and proved once again the best way to prepare for and overcome cyber security disasters is international collaboration. All CERT teams can benefit from belonging to a wider trusted international network. So why not become listed by TF-CSIRT Trusted Introducer in 2018?
Why become a Trusted Introducer listed team?
- To express your interest in cyber security on the European and International stage;
- To prove to your stakeholders a commitment to follow contemporary security challenges and adhere to community-agreed best practices and standards;
- To be involved in different security projects, where their success is largely based on the contributions of CSIRTs from different sectors and constituencies;
- To learn from the successes and failures of other teams from personal face-to-face meetings and subject-matter presentations or briefings;
- To meet other security teams three times a year in different European locations by being invited by volunteering teams or national communities willing to support the TF-CSIRT objectives;
- To become a member of very open, friendly and not-competitive environment that cultivates a sensitive discussion and consensus building which is outside of the usual pressures of the daily business;
- After getting familiar with the community and adopted practices, you can take the appropriate steps towards accreditation and certification.
What are the official requirements?
- You are part of an already functional CSIRT, SOC, Product Security or other security team with established security incident handling processes and services;
- You express your interest by providing information and contact information about your team using the official application form provided by Trusted Introducer;
- You identify two teams which are already TI accredited or TI certified and are willing to openly express their support during a three-week voting period. Within this voting period other teams can provide additional support, but also object to your requested membership. By exercising their rights to review new listing requests, the teams ensure that TF-CSIRT stays a trusted and consistent community.
What are the non-mandatory requirements?
- Be ready to participate in the meetings;
- Be active in the community and share vital information with other teams;
- Find projects that fit your needs and contribute where possible;
- Be prepared to keep your team’s contact information always up-to-date and participate in community-wide initiatives, such as reaction tests to check the contact information regularly.
You can read more about the process of getting listed here: https://www.trusted-introducer.org/processes/registration.html
So add this to your list of New Year’s resolutions and join the international CSIRT community next year!