Additional Programming

Sunday, June 11th

FIRST Training

Mitigating DDoS Attacks

FIRST is offering training courses on Sunday, 11 June. The morning session will be taught by Michael Hausding (SWITCH) and cover Beginners/Introductory level topics including CSIRT Fundamentals, Operations and Incident Coordination. The afternoon session will be presented by Krassimir Tzvetanov (Fastly) and is titled Mitigating DDoS Attacks.

There is no cost to attend – however, registering and not showing, may result in a cancellation of your conference participation. So please be sure to review the subject matter and notify us if there is a change in your anticipated attendance. Registration is now open.

Register Now!


On Sunday, FIRST will host an all-day Hackathon from 10:00-17:00. FIRST will provide a room where interested participants can work in smaller groups and have the ability to collaborate with other conference attendees toward a common goal. The event will be moderated and FIRST will provide the project topics and wireless internet access, in addition to refreshments, so participants can focus on the most important thing - finishing their project.

There will be a call for projects announcement in March and we will announce the overall agenda for the Hackathon in May. Please plan to join us and purpose new ideas or existing projects! Contact with questions.

GFCE Meeting

Sunday, June 11th from 13:00-16:00 local time in San Juan

This is an invite only meeting and more information will be sent directly to invitees. 

Amazon & FIRST Security Jam Orientation

Sunday, June 11th from 14:00-19:00 local time in San Juan (Tropical Ballroom)

Please join us for an orientation to the Amazon & FIRST Security Jam, a series of challenges that will take place during the conference week. All participants are encouraged to attend the orientation.

Monday-Friday, June 12-16th

Birds of a Feather (BoFs)

Bird of a Feather Sessions, activities primarily focus on meetings which take place at the conference based on the interest of a number of members. They are not necessarily intended to lead to year round work.

BoF sessions are scheduled to take place during before conference sessions begin (8:30-9:30am) or following the final session of the day. We will have an up-to-date-schedule and bulletin board near the registration desk onsite. Attendees are welcome to request a BoF in advance by emailing or by adding their own BoFs to the bulletin board onsite (rooms are assigned based on first come, first served – and room assignment space is limited. A list of BoFs scheduled in advance will be posted soon.

Tuesday, June 13th

Education Summit on PSIRT/CSIRT Services Framework

Tuesday, June 13th from 16:00-17:00 local time in San Juan (Flamingo A-B-C-D)

Discussion and review of the PSIRT Services Framework where we show the similarities and differences from a CSIRT. This year long review and drafting comes from PSIRTs from open and closed source vendors of all sizes and includes input from Operations and Information Technology response teams. We will also discuss the need to review the CSIRT Services Framework and to incorporate lessons learned in better organizing and drafting (writing) of a Framework to base Training efforts towards.

Friday, June 16th

Trainer Training

How to become a better trainer and presenter! By Don Stikvoort (MSc, NL)

Friday, June 16th from 10:15 to 17:15. They will be a 2 hour break for closing remarks and lunch.

Don Stikvoort has 30 year’s work experience, was one of Europe’s Internet pioneers, “founding father” of 8 cyber incident response teams and originator of the European cooperation in this area. Don has been a FIRST member since 1992. Also, he is an executive coach and certified master trainer - training people in the areas of NLP, hypnotherapy, communication and presentation. In this post-conference session on Friday, Don will provide insight on how to become a more effective trainer and presenter.

This is the first part of a 3-part trainer training, brought to you by FIRST. The other 2 parts will be regularly organized as well in the near future, and will further help you improve your trainer skills by means of video training and more in depth teachings that reflect your specific needs in this area.

Space is limited (no fee to attend) and pre-registration is required.

Register Now!

Friday-Saturday, June 16-17th

NatCSIRT Meeting 2017

12th Annual Technical Meeting for CSIRTs with National Responsibility

Is your organization responsible for protecting the security of nations, economies, and critical infrastructures? If so, attend NatCSIRT 2017 to discuss with your peers the unique challenges you face every day. You will drive discussions that focus on current issues, tools, and methods relevant to the National CSIRT community. This year’s meeting is co-located with the 29th Annual FIRST Conference in San Juan.

This meeting is by invitation only and more details can be found at