Getting started with a National CSIRT guide

Why does your country need a national CSIRT? What does it take to build one? And where do you begin? If you are asking yourself these types of questions, we have got some good news for you.

This guide is structured in such a way that you can easily navigate between sections in no particular order. The next section ‘What is an nCSIRT?’ is a good starting point to get a quick overview of the key aspects of an nCSIRT. From there on, you can pick any topic that may be of
interest to you. In this guide, we cover the following topics: The value of community building and important stakeholders, the importance of political support for nCSIRT capacity building, key ingredients to help formulate a business case, lessons learned from experts and nCSIRTs across the globe. Finally, the resource guide highlights the relevance of some key resources available, and the glossary provides an overview and explanation of key terminology

This guide has been developed in the context of the Global Forum on Cyber Expertise (GFCE), Working Group B, taskforce Cyber Incident Management. The GFCE is a global platform that aims to strengthen cyber capacity and expertise globally through international collaboration, through practical initiatives around relevant topics.

The development of the guide is funded by the Dutch government.