visual_plus

TI Listing

visual_plus

Join the TF-CSIRT community through the Trusted Introducer's three-tier membership model: Listed, Accredited, and Certified.

This page guides you through the first step – becoming a Listed Team – the key to visibility and collaboration within the cybersecurity eco-system established by CSIRTs, SOCs, ISACs, PSIRTs and other cybersecurity teams. In a world where cybersecurity demands are ever-growing, becoming listed connects you to a trusted network of security professionals.

Listing of Cybersecurity Teams

There are a lot of different reasons to become listed! And no fees will be charged for listed teams, although registration fees for events might apply if charged for a particular event the team attends.

The process is simple enough and once you have secured your sponsors it will take 4 to 5 weeks to conclude a vote of the full members of the TF-CSIRT Community (teams which are TI Accredited or TI Certified) and inform you about the outcome:

  1. find at least two TI accredited or TI certified teams that are willing to sponsor your team (check out the TI Directory)
  2. fill out the form and provide it with the needed PGP/GPG public keys by email to ti@trusted-introducer.org
  3. you will receive a reply in which the TI team acknowledges your request, with that comes the so-called appendix A, a PDF document containing the basic rules your team need to adhere to
  4. sign the appendix A (for more details and background check out the invitation package for TI Listing Candidates)
  5. submit the signed appendix A by email to ti@trusted-introducer.org
  6. you will receive a reply with a unique link for the further processing. This link opens a web form that is used to collect all data required for gaining the TI listing candidate status. You can safe the collected data and finally submit it to the TI team.
  7. Please let us know by email to ti@trusted-introducer.org that you are ready to proceed.

If your team would like to understand more about the process: Read on and have a look at the process!

The graphic visualises the process of listing of Operational Teams

New Listing Candidates

The TI team encourages all applying teams to engage full members of the TI Directory to support their registration early on. It is always easier for new you to have at least two sponsors already at the time of your listing request.

After a team has applied for registration as summarized above the procedure is as follows:

  • The completed application is distributed inside the TF-CSIRT Community.
  • Within the voting period of three weeks the new candidate team needs to have explicite support of at least two TI Accredited teams (or one TI Associate and one TI Accredited team) in total.
  • TI Associates MAY sponsor listing candidates but there MUST be at least one different team sponsoring the candidate in question with no connection to the TI Associate. TI Associates MUST NOT sponsor their own team.
  • Additionally no objections must be raised within the TF-CSIRT community. Any member from the TF-CSIRT community, i.e. accredited team members and TI Associates, can object against a candidate. Objections will be handled with care by the TI team involving both the candidate team and the objecter.
  • The TI team informs the TF-CSIRT Community of the outcome of the application.
  • Rejected candidates do have the right to re-apply right after they receive the outcome message, although we recommend to take some time to discuss with potential sponsoring teams any new registration application. Candidates need to be sure that the voting is in favour for it the next time.
  • After three consecutive rejections any new application will be automatically rejected without any voting.
  • If a automatically rejected team believes that the situation or circumstances (causing the rejection) has changed significantly, it might request a decision of the TF-CSIRT Steering Committee to allow a new registration application. It is important that the team explains what has changed and why it is likely that the team will be accepted this time.

Re-Listing every three years

To increase the default trust level within the TI Community, all TI Listed teams that have not become TI Accredited within three years after their initial registration or the last successful "re-listing" are required to be sponsored for another three year period.

Again this requires explicit support from full members of the TF-CSIRT Community. If there is no support, the team will be removed and no longer listed in the TI Directory.

For the re-listing the same procedure as for the "listing" is used.

The graphic visualises the process of Re-Listing every three years

In addition, the procedures require any re-listing candidate to meet the following conditions:

  • having two people registered as team representatives -- two for resiliency, each of those must have a valid e-mail address and valid PGP/GPG key
  • valid team e-mail address and PGP/GPG key for the team
  • latest update or up-to-date notice of team information within the TI Directory not older than 12 months

The TI team encourages all listed teams to attend TF-CSIRT Meetings to meet other teams and secure the on-going support of the community!

Related Materials

Useful materials for this process are:

  • form to register your application to become a TI Listing Candidate
  • invitation package for TI Listing Candidates