Conduct a study for European Union Agency of Cybersecurity “How to set up CSIRT and SOC: Good practice Guide”

Suggest a page edit


Cybil code: G0688

Status: Finished

From: Mar 2020

To: Dec 2020







The aim of the publication is to provide results-driven guidance for those who are interested in establishing a CSIRT or SOC or modernising a CSIRT or SOC according to modern methodology.


Main activities of the project included:
– Desk research of the analysis of current publications on the establishment of CSIRTs.
– Development of a questionnaire which was completed by 40 CSIRTs and SOCs.

The Cybil project repository is being continuously updated, and the information it contains is either publicly available, or consent for publication was given by the owner. Please contact the portal manager with any additional information or corrections. Whilst every reasonable effort is made to keep the content of this inventory accurate and up to date, no warranty or representation of any kind, express or implied, is made in relation to the accuracy, completeness or adequacy of the information contained in these pages.