Western Balkan CERT Cooperation

The objective of this report is to provide concrete proposals on possible approaches and models for enhanced cooperation among Western Balkans national CSIRTs based on the following main research questions:

In which areas can national CSIRTs from the Western Balkans region cooperate with other nCSIRTs, but also other types of CSIRTs, from other economies, to increase their capabilities (to detect, analyse and mitigate attacks; to analyse and communicate warnings and alerts to prevent such attacks; to raise public awareness; etc.)?
– What successful CSIRT cooperation networks (in Europe and other parts of the world) exist?
– Which of these are relevant for the national CSIRTs from Western Balkans economies?
– How, and to what extent, can models of international best practice be applied?

How can the national CSIRTs from Western Balkans improve their multilateral cooperation and communication by building on their achievements of the past?
– What successful CSIRT collaboration tools and processes exist?
– Which of these are relevant for the nCSIRTs from Western Balkans economies?

How, and to what extent, is the cooperation among the national CSIRTs from Western Balkans affected by the individual capacities and capabilities as well the maturity of each individual nCSIRT?
– What successful approaches and best practices exist to evaluate and plan for the improving the maturity, including the appropriate capacities and capabilities?
– Which of these are relevant, and should be applied within the Western Balkans economies?