Strategic Thinking and Planning SIG

Mission

In the face of increasing budget constraints and shifting dynamics in service offerings, there is a need for CERTs and associated organisations (e.g., ISACs) to share approaches and best practices in strategic planning and anticipate, not simply respond to, future trends. For this purpose, the proposed SIG will work to create a dedicated, global forum for strategic dialogue and knowledge exchange on the current and emerging challenges, opportunities, and innovations within national, regional, and organisational CERTs, regardless of their business model (e.g., self, or externally funded; member-based; proprietary; etc.). The SIG will be anchored to the principles of information sharing, co-design, and common uplifting.

Goals & Deliverables

Over the next 12 months, this SIG aims to:

  1. Facilitate structured discussions on shared strategic and operational challenges facing CERTs and similar organisations (e.g., ISACs), such as workforce sustainability, funding models, public-private engagement, governance structures, and the increasing pressure to deliver impact and maintain relevance.
  2. Share models and case studies of how different CERTs are evolving – including changes in mandate, expansion into advisory functions, or adaptation to sector-specific needs – to help members identify transferrable insights.
  3. Develop a landscape overview of strategic themes affecting CERTs globally, informed by member contributions, to assist leaders and policymakers in shaping future-ready teams.
  4. Host expert briefings or roundtables on topics such as CERT maturity, capability building, role clarity in multi-agency contexts, and threat intelligence-sharing frameworks.
  5. Produce a position paper or summary report highlighting key trends, insights, and recommendations from the SIG’s first year, which could inform wider FIRST initiatives or partner engagements.
  6. Produce actionable artefacts and re-usable materials (e.g., presentations) to help leaders and decision-makers in CERTs communicate internally and externally on CERT’s goals, mission, and evolving landscape.

If there is strong engagement, the group may explore opportunities for deeper cross-CERT collaboration or shared tooling and training approaches in the following year.

Meetings

Chair

Mailing list

Any FIRST member may join, others are welcome as well, requests must be approved by the SIG chairs.

Request to Join