TIme Session Session Focus and     Purpose Session Type Facilitators
09:00 – 09:30 Presentation on Structure of TF-CSIRT and the TI Review Purpose: to provide a background on the review and to explain current situation including TI cost and legal position. Presentation
09:30 – 09:45 Short Q&A session from initial presentation Purpose: to address any immediate questions on the presentation and scope of the meeting. Whole group Q&A Lionel Ferette
09:45 – 10:30 Break-out Groups on Current Service Structure Purpose: to define the scope of the services that people want and how they want it delivered within the current service offering.

Proposed questions for the groups:

  • What value do you see in current TF-CSIRT structure? / What benefits do you get from TF-CSIRT?  / What doesn’t work for you in the current TF-CISRT model?
  • What services do you use / don’t use? Which are the most useful?
  • How well does the community work and what does it achieve?
  • Can you justify the cost of TI to management? What could help you to do this? Could you justify a higher / lower cost?
  • How often do you use DB of accredited teams?
  • How many times did you support listing a candidate? Never? Why?
 Breakout Groups looking at the list of questions. 5-6 tables, one SC member per table to act as facilitator and take notes.
10:30 – 10:45 BREAK
10:45 – 11:30 Break-out Groups on Future Service Delivery Purpose: to gather feedback on the strategic future of TF-CSIRT and Trusted Introducer.

Proposed questions for the groups:

  • What added value would you want to see in the future?
  • What kind of impact are we having on community?
  • What type of organisation do you want TF-CSIRT to be?
  • What is the future vision for TF-CSIRT?
  • What happens in a world without TF-CSIRT?
  • What is the position of our stakeholders?  Who are the main beneficiaries?
 Breakout Groups looking at the list of questions. 5-6 tables, one SC member per table to act as facilitator and take notes.
11:30 – 12:00 Report back Purpose: to hear feedback from each group and to give groups an opportunity to challenge ideas not raised in their sessions. Combined session Reporting back by each facilitator.