visual_shield

TF-CSIRT Community

As a dedicated task force, TF-CSIRT brings together CSIRTs as well as SOCs, PSIRTs, ISACs, and other incident response teams. With a focus on Europe the aim is to foster coordination, share expertise, and strengthen the collective response to cyber threats. By connecting regional efforts with global partners, we aim to build a safer and more resilient cyber space.

Join us in our mission to empower the TF-CSIRT Community and shape the future of cybersecurity through collaboration and innovation.

What defines us

Shield

Why

Cybersecurity incidents require fast and effective responses from the organisations concerned. CSIRTs as well as SOCs, PSIRTs, ISACs, and other incident response teams are together responsible for making our society and their own organisations more resilience to threats.

As sharing is caring, we believe that growing together is faster and more sustainable.

Grow

Attitude

TF-CSIRT operates with a European mindset, and strives to make it services and meetings inclusive, accessible, easy-to-reach, and affordable for the whole incident response space in Europe – regardless of sector or naming of your entity.

TF-CSIRT evolves and fosters an independent and trusted community that encourages collaboration within the incident response space and provides opportunities for both, organisations and individuals, to improve and grow.

Through the Trusted Introducer service, TF-CSIRT can offer well-maintained and up-to-date information and provide teams with recognition status via its differentiated listing, accreditation and certification processes.

Goals

Goals

TF-CSIRT provides a forum where members of CSIRTs, PSIRTs, SOCs, ISACs and others can exchange cyber threat intelligence, experiences and knowledge in a trusted environment in order to improve cooperation and coordination. It maintains a system for registering and accrediting entities, as well as certifying service standards and maturity.

TF-CSIRT also develops and provides services for all members of our community, promotes the use of common standards and procedures for handling security incidents, and coordinates joint initiatives where appropriate. This includes the training of staff members, and assisting in the establishment and development of new entities.

The task force further liaises with FIRST, ENISA, RIPE NCC, CERT/CC, GÉANT and other regional communities of CSIRTs, PSIRTs, SOCs, ISACs , as well as law enforcement agencies.

Our Aims

The TF-CSIRT Steering Committee has set the following strategic aims for 2025+.

  1. Growing community with keeping the trusted environment.
  2. Deliver the community affordable and inclusive events with a community driven program.
  3. Give a framework für exchange ideas and connect to people within TF-CSIRT.
  4. Organise affordable and plentiful trainings from practitioners.
  5. Building sustainable partnerships with relevant organisation to strengthen the communities.

Our Strengths

While discussing our strategy, we summarized circumstances and key elements from the inside of TF-CSIRT on which we can build on and which will help us to fulfill our goals.

  • Community and its people is the first element we identified as a great strength. We have motivated people who likes to collaborate, join and support others as volunteers to bring the whole community further.
  • Diversity in case of many different kinds of CSIRTs, SOCs, ISACs and even PSIRTs in the community. Although TF-CSIRT started as a academic centric approach, in the meantime we have a nice and interesting variety of Teams inside and outside of Europe. Together we have a lot of knowledge in the community to share.
  • Trust is the main principle we build the community on. Not only if a new teamn is joining us, also when teams disputing, we have procedures to raise a voice, bring in the objections and solving the situation keeping the trust alive.
  • The TI Directory is a valuable and up-to-date contact database of about 500 teams in the RIPE-region and beyond, that can be used to get in touch with peers in a fast way. This is checked routinely by reaction tests proving our communication channels.
  • With the use of SIM3 as our Certification Standard and the processes to measure the maturity of a team, we have a tool not to compare each other, but to systematically assess a team's operation and provide helpful hints to further improve and evolve towards a mature team.
  • Meetings are the places we mostly exchange information and developing ideas, bringing special topics forward, get to know each other and much more. And we like to keep those meetings affordable supported by those teams which have more resources than others.

Becoming a Member

If you like to become a member please review the listing process. For any questions please contact us by email!

Thanks for contacting us!