FIRST Global Initiatives

FIRST POST: Oct-Dec 2025

Wed, 31 Dec 2025 00:00:00 +0000

Message from the Chair; Member Spotlight; Standards Update; Special Interest Group Updates; Training and CCB; Record Growth Announcement, Cybersecurity Awareness Month and African Cyber Capacity Building; Why We Can’t Stop Talking About Information Sharing; FIRST Welcomes New Members and Thanks Sponsoring Teams!; Upcoming Events

FIRST POST: Jul-Sep 2025

Thu, 04 Sep 2025 00:00:00 +0000

Message from the Chair; Digital Sovereignty and Communities; Member Spotlight; FIRST CORE; Special Interest Group Updates; Training and CCB; Strategic Initiatives Amplification, Video Series Completion and LinkedIn Growth Surge; Upcoming Events

FIRST POST: Apr-Jun 2025

Thu, 31 Jul 2025 00:00:00 +0000

Message from the Chair; Incident Response Hall of Fame 2025 Recipient: Richard (Rich) D. Pethia, CERT/CC; New Board Member: Graciela Martinez Giordano; Building Bridges is fine, but you have to use them; Board Roles & Responsibilities; FIRST Welcomes New Members and Thanks Sponsoring Teams!; Women of FIRST; Strategic Campaign Success, Video Series Launch and Global Media Recognition; Upcoming Events

FIRST POST: Jan-Mar 2025

Fri, 11 Apr 2025 00:00:00 +0000

Message from the Chair; Strategy and Governance: Launch of the FIRST Strategy Framework; FIRST Welcomes New Members and Thanks Sponsoring Teams!; Special Interest Group Updates; The role of National CERTs/CSIRTs in Implementing the UN Norms of Responsible Behavior in Cyberspace; Growth Stack Media Q1FY25 PR Highlights: Media Coverage Expansion & Successful Campaigns; Green Copenhagen; FIRST on Social Media; and Upcoming Events

FIRST POST: Oct-Dec 2024

Tue, 31 Dec 2024 00:00:00 +0000

Message from the Chair; The Growing Role of Cyber Diplomacy in Managing Digital Conflicts; APCERT & FIRST Regional Symposium; FIRST Membership Committee - Updated Liaison Process; FIRST Welcomes New Members and Thanks Sponsoring Teams!; Trainer Recognition; Growth Stack Media Q4 PR Highlights: CISA Endorsement & Emerging Industry Leadership; Special Interest Group Updates; Early Bird Registration for FIRSTCON25 Copenhagen Ends February 10!; Upcoming Events

FIRST POST: Jul-Sep 2024

Fri, 04 Oct 2024 00:00:00 +0000

Message from the Chair; Board members Roles and Responsibilities for 2024/2025; FIRST-AJCCBC Workshop Series – Summer 2024; First NETSEC training in Fukuoka; Looking back at the Fukuoka Annual Conference; Training on Fundamentals of Cyber Threat Intelligence successfully delivered at the International Information Technology University (IITU), Almaty, Kazakhstan; FIRST at the Summer School on Internet Governance in Meissen; Special Interest Group Updates; FIRST Newcomers & Membership Committee; IMPORTANT: Heads-Up on VAT for FIRST for all events in EUROPE from 2025 onward; FIRST Gains Momentum in Media Landscape; Upcoming Events; FIRST on Social Media

FIRST POST: Apr-Jun 2024

Mon, 20 May 2024 00:00:00 +0000

Message from the Chair; Message from the Chair; FIRST Standards Committee; CTI Conference in Berlin; FIRST Newcomers & Membership Committee; On the Road to Fukuoka - See you soon!; FIRST as a Diana Initiative Community Partner; Growth Stack Media PR Updates; Special Interest Group Updates; FIRST Impressions Podcast; FIRST on Social Media

FIRST has officially published the latest version of the Common Vulnerability Scoring System (CVSS v4.0)

Wed, 01 Nov 2023 17:00:00 +0000

In June 2023, attendees at the 35th Annual FIRST Conference, in Montréal, Canada got a first-look preview of the new version of the Common Vulnerability Scoring System (CVSS), version 4.0. After two month of public comment followed by two months of addressing those comments, FIRST is proud to announce the official publication of CVSS version 4.0.

FIRST POST: Jul-Sep 2023

Tue, 18 Jul 2023 00:00:00 +0000

Message from the Chair; Conference Roundup; Special Interest Groups; Weekend Training; Training on DNS Prevention, Detection, Disruption and Defense; Diversity and Inclusion; New Board Member Introduction; M3AAWG 58 Meeting; 36th Annual FIRST Conference to take place June 9-14, 2024 in Fukuoka, Japan; New Members; Standards; Communications; Upcoming Events.

FIRST launches new code of ethics for incident response and security teams on Global Ethics Day

Wed, 21 Oct 2020 00:00:00 +0000

October 21, 2020 – following a global consultation, the Forum of Incident Response and Security Teams (FIRST) is launching new ethics guidelines for incident response and security teams today on Global Ethics Day. ethicsfIRST provides guidance for cybersecurity professionals on how to conduct themselves professionally and ethically during incidents. Inspired by Earth Day, Global Ethics Day provides an opportunity for organizations to explore the meaning of ethics in international affairs

FIRST jointly honors Ian Cook and Don Stikvoort in The Incident Response Hall of Fame awards

Wed, 23 Sep 2020 00:00:00 +0000

The awards celebrate outstanding contribution to the Incident Response community and cyber security

FIRST released ethics guidelines to deepen trust among incident response teams

Thu, 19 Dec 2019 00:00:00 +0000

Calling for public consultation until end of January, 2020

Applications close 29 November for FIRST’s Fellowship Program named after the late Suguru Yamaguchi

Wed, 23 Oct 2019 12:00:00 +0000

FIRST pledges to financially support up to four regions to ensure global integration of security teams

Available in PDF

FIRST POST: Autumn 2019

Mon, 30 Sep 2019 15:10:00 +0000

Bringing together Security and Incident Response teams from around the globe.

FIRST POST: Summer 2019

Mon, 17 Jun 2019 07:00:00 +0000

FIRST launched its FIRST Post, a quarterly newsletter with updates from the FIRST community. Learn more about our Edinburgh conference, our new Executive Director, Chris Gibson, and several key initiatives such as the Product Security Incident Response Team (PSIRT) framework and policy outreach.

2019 Bangalore TC Registration

Thu, 17 Jan 2019 14:00:00 +0000

Registration is now open for the FIRST TC in Bangalore, India February 18-19th, 2019. Sign up here: https://first.org/events/colloquia/bangalore2019/registration

FIRST is calling for nominations for the Incident Response Hall of Fame

Fri, 07 Dec 2018 19:20:00 +0000

Members who would like to nominate a qualified individual or team should complete the form by April 2019 here: https://first.org/hof/

2019 Event Calendar

Fri, 07 Dec 2018 10:00:00 +0000

The 2019 event calendar has been updated. We have several events with open registration so please update your calendars and register today!

Call for Trainers!

Fri, 07 Dec 2018 09:00:00 +0000

Would you like to find a way to give back to FIRST and the incident response community? Sign-up on our first-trainers list to be notified of opportunities to travel the world and share your expertise. FIRST will provide the materials and travel if you provide your time and knowledge. Contact first-sec@first.org for more details.

FIRST launches The Incident Response Hall of Fame to honor visionaries and leaders in the field of cyber security

Thu, 06 Dec 2018 22:00:00 +0000

Be a FIRST Volunteer

Mon, 27 Aug 2018 15:40:00 +0000

Volunteers at FIRST initiative enables contributors to share their past experience with FIRST community and also receive a certificate of participation in the program.

Taking a Multi-Stakeholder Look at Cyber Norms

Mon, 27 Aug 2018 00:00:00 +0000

Recently we've seen several examples of likely state-sponsored security incidents of which the appropriateness was later strongly debated. Incidents such as states impacting commercial enterprises during cyber attacks; purported sabotage of critical infrastructure, and attacks on civilian activists have all, to a greater or lesser degree, led to concerns being raised by both civilian watchdog groups, academics, technologists and governments.

FIRST receives grant for cyber security capacity building in the Pacific Island region

Mon, 18 Jun 2018 18:00:00 +0000

Australian Department of Foreign Affairs and Trade (DFAT) issues a grant to FIRST to develop training and an event focused on incident response capacity building in the Pacific

Safety FIRST: Why we need collaboration to improve cybersecurity

Tue, 17 Oct 2017 00:00:00 +0000

A global and trusted network of Computer Security Incident Response Teams (CSIRTs) can help spread the message within their respective countries and can be used to a great effect to combat dispersed sources of attacks.

The Forum of Incident Response and Security Teams (FIRST) is the oldest forum of such kind and was founded in 1989 with exactly that goal – to establish communication channels between CSIRTs that can be used to share best practices and, during incidents, to exchange information about attacks and coordinate response.

FIRST releases Policy for Standards Development

Tue, 15 Aug 2017 13:00:00 +0000

The Forum of Incident Response and Security Teams has published a formal policy to guide cyber security standardization within its standards groups.

FIRST and APNIC sign agreement to improve incident response capability in Asia Pacific

Tue, 11 Jul 2017 11:00:00 +0000

Memorandum of Understanding enables both organizations to benefit from each other’s programs to support computer security incident response teams (CSIRT) in the region.

FIRST announces release of Guidelines and Practices for Multi-Party Vulnerability Coordination and Disclosure

Thu, 06 Jul 2017 13:00:00 +0000

The Forum of Incident Response and Security Teams announces the release of a set of guidelines and norms for vulnerability disclosure that affects multiple parties.

FIRST strengthens global ties by partnering with regional security organizations

Thu, 15 Jun 2017 20:00:00 +0000

The Forum of Incident Response and Security Teams signs Memorandums of Understanding with GÉANT and OIC-CERT to enhance collaboration.

FIRST Kicks off its 29th Annual Conference

Mon, 12 Jun 2017 22:00:00 +0000

The event offers conferences, keynote presentations and activities designed to maximize network opportunities and information exchanges on information security and incident response.

FIRST calls for input on policy for standards development

Thu, 08 Jun 2017 09:00:00 +0000

The Forum of Incident Response and Security Teams announces a public request for comments on a draft policy to guide cyber security standardization within its working groups.

FIRST boosts learning and development offering with launch of open training platform

Wed, 07 Jun 2017 09:00:00 +0000

The Forum of Incident Response and Security Teams has announced the release of an open training platform for cyber security incident response professionals.

FIRST releases version 1.1 of the CSIRT Services Framework

Wed, 24 May 2017 14:40:00 +0000

The leading association of incident response and security teams released a new version of its CSIRT Services Framework. This is a formal list of services a Computer Security Incident Response Team (CSIRT) may consider implementing to address the needs of their constituency.

FIRST releases twenty years of conference materials

Tue, 18 Apr 2017 13:00:00 +0000

The leading association of incident response and security teams publishes its repository of twenty years of incident response learnings.

Statement on FIRST events and the US Executive Order on Immigration

Tue, 31 Jan 2017 23:00:00 +0000

The FIRST Board of Directors recognizes and shares the concerns of members and event attendees about recent changes in US immigration policy. We believe global participation is a prerequisite to developing strong and successful responses to internet security issues.

Deadline extended on comments for "Guidelines and Practices for Multi-Party Vulnerability Coordination"

Mon, 30 Jan 2017 23:00:00 +0000

The comment period for the "Guidelines and Practices for Multi-Party Vulnerability Coordination", published by the Vulnerability Coordination SIG, was extended to February 28th, 2017. FIRST invites anyone with an interest in this area to review the current draft, available from https://www.first.org/global/sigs/vulnerability-coordination/multiparty, and provide comments for consideration.

Guidelines and Practices for Multi-Party Vulnerability Coordination Open to Review

Fri, 20 Jan 2017 00:01:00 +0000

Cisco Blogs – Omar Santos of Cisco describes the release of the Guidelines and Practices for Multi-Party Vulnerability Coordination, released by the FIRST Vulnerability Coordination SIG.

Scoring Cisco Security Vulnerabilities with CVSSv3

Thu, 19 Jan 2017 00:00:00 +0000

Cisco Blogs – Omar Santos of Cisco describes the value of using CVSSv3 to score security advisories that address security vulnerabilities in Cisco software

FIRST and LACNIC sign agreement to improve incident response capability in Latin America and the Caribbean

Tue, 22 Nov 2016 14:00:00 +0000

Memorandum of Understanding enables both organizations to benefit from each other’s programs to support computer security incident response teams (CSIRT) in the region.

28th Annual FIRST Conference in Seoul

Thu, 30 Jun 2016 16:41:00 +0000

The Forum of Incident Response and Security Teams (FIRST), a recognized global leader in incident response has successfully finished its 28th Annual Conference, which takes place this June (12th – 18th) in Seoul, South Korea. Co-hosted by the MSIP (Ministry of Science, ICT and Future Planning), KISA (Korea Internet Security Agency) and KrCERT/CC, the conference was held at Conrad Seoul.

2016 Episode 3: An Interview with Jason Jones from Arbor Networks

Thu, 26 May 2016 14:40:00 +0000

Join the interview in progress! This week’s podcast features Jason Jones, Senior Security Researcher for Arbor Networks’ ASERT team. Jason talks a little bit about his current research at Arbor that focuses on issues in South Korea as well as his upcoming presentation at FIRST 2016, “Tasty Malware Analysis with T.A.C.O.: Bringing Cuckoo Metadata into IDA Pro.” Jason presents on Monday, June 13th at 17:00.

South Korea’s Adviser in Cyber Security to open 28th Annual FIRST Conference in Seoul

Tue, 17 May 2016 19:00:00 +0000

The Forum of Incident Response and Security Teams (FIRST), a recognized global leader in incident response, has announced the line-up for its 28th Annual Conference, which takes place this June (12th – 18th) in Seoul, South Korea.

The Program for the 2016 conference is now live

Wed, 06 Apr 2016 18:07:00 +0000

FIRST publishes Security Incident Response Teams (SIRTs) Services Framework Version 1.0 and commits to developing training content to support it

Wed, 30 Mar 2016 23:00:00 +0000

The Forum of Incident Response and Security Teams, Inc. (FIRST) has announced publication of the SIRT Services Framework Version 1.0. This initial release provides an update on the services provided by Security Incident Response Teams and was developed in collaboration with experts from 25 countries across 6 continents.

The final report of the 2015 Best Practices Forum on CSIRT has been published

Mon, 21 Dec 2015 15:34:00 +0000

The final report of the 2015 Best Practices Forum on CSIRT, organized within the Internet Governance Forum, has been published

FIRST has formed the Red Teaming SIG

Mon, 14 Dec 2015 12:10:00 +0000

FIRST has formed the Red Teaming SIG. Interested participants who are part of an existing Red Team or in the process of forming one should send a request to be added to the mail list to first-sec@first.org

The FIRST Fellowship Program is accepting applications

Mon, 14 Dec 2015 12:08:00 +0000

The FIRST Fellowship Program is accepting applications until 15 January. More information can be found at: https://www.first.org/global/fellowship

Meet the 2015 FIRST Fellowship Program participants!

Sat, 20 Jun 2015 18:18:00 +0000

The 2015 Fellowship Program participants at the Annual FIRST Conference in Berlin, Germany, meeting with Fellowship program coordinator Adli Wahid, outgoing Chairman Maarten Van Horenbeeck and incoming Chair Margrete Raaum, as well as Directors Mike Murray and Gaus Rajnovic.

FIRST announces availability of new Common Vulnerability Scoring System (CVSS) release

Wed, 10 Jun 2015 18:00:00 +0000

Third version aims to make the system more applicable to modern concerns

FIRST sponsored a TRANSITS training in Tunisia May 25-27, 2015

Wed, 27 May 2015 13:30:00 +0000

The event was hosted by AfricaCERT and team rep Jean-Robert Hountomey and was also supported by GEANT Association (TRANSITS II Training) and Don Stikvoort.

Microsoft Returns as Platinum Sponsor

Tue, 05 Nov 2013 19:06:00 +0000

FIRST welcomes back Microsoft to the 2014 conference sponsorship team! Microsoft has been a strong supporter of FIRST and a sponsor since 2005.

2014 Conference Registration is Open!

Wed, 03 Jul 2013 10:12:00 +0000

Least developed countries are vital for global security

Thu, 06 Jun 2013 07:03:00 +0000

If the number of internet users in LDCs continues to rise, it is crucial that we have a co-ordinated global response to information security incidents. Posted by Chris Gibson

FIRST Fellowship Program

Wed, 29 May 2013 22:00:00 +0000

FIRST announces the launch of the FIRST Fellowship Program, which will enable information security incident response teams from the world’s least developed countries (LDCs) to become part of the global incident response community.

FIRST Announces Call for Participants and Subjects for version 3 of the Common Vulnerability Scoring System (CVSS)

Thu, 22 Mar 2012 10:54:00 +0000

The Forum of Incident Response and Security Teams (FIRST) today publicly announced its Call for Participants for the core group of members on the Common Vulnerability Scoring System Special Interest Group. Please see details at The Call for Participants period for CVSS version 3 SIG begins March 16 and will end May 4

CEP Global Risk Roundtable is now open for registrations!

Wed, 19 Oct 2011 16:52:00 +0000

CEP Global Risk Roundtable is now open for registrations! To be held 4 November in New York. Visit http://www.globalcep.com/ for more information!

Interested in joining a SIG?

Wed, 19 Oct 2011 16:43:00 +0000

Interested in joining a SIG? Contact first-sec@first.org for details?

2010 dates for the Corporate Executive Program!

Fri, 05 Feb 2010 13:45:00 +0000

The CEP has released the dates and locations of their next 6 upcoming events. The CEP will hold its Annual 2 day Global Risk Summit at Gleneagles, Scotland this May 5-7, 2010. Four 1 day events will be held throughout the remainder of the year in the UK and the USA. For more event details and information about CEP, please visit www.globalcep.com.

FIRST is accepting theme suggestions for the 23rd Annual FIRST Conference in Vienna in 2011

Thu, 04 Feb 2010 19:05:00 +0000

This is a great opportunity to participate and be a part of the conference, please send your suggestions to Peter Allor at peter.allor@first.org. The theme winner will receive a complimentary registration to the 2011 conference. Suggestions are due by March 31st and the winner will be announced in April. And mark your calendars for attending the conference. The dates are June 12 to 17, 2011!

Best Practices Contest 2009

Thu, 19 Feb 2009 21:43:00 +0000

FIRST and CERT/CC announce the 2009 Security Best Practices Contest. FIRST and the CERT/CC are jointly hosting the contest in conjunction with FIRST's 21st annual conference in Kyoto, Japan. The goal of the contest is to share best practices that have been developed to prevent and mitigate cyber attacks/risk in diverse environments and cultures. This contest is open to public; submitters do not have to be members of FIRST. For more information see the Best Practice Contest page on FIRST website (http://www.first.org/global/practices/) or email first-2009bp@first.org.

CEP Global Risk Summit 2009

Thu, 19 Feb 2009 17:14:00 +0000

The CEP Global Risk Summit will be held in London on 7 & 8 May 2009 at the London Marriott Hotel, County Hall. The Summit will feature executive participants who will debate trends and anticipate the major risks that will impact international business over the next 12 months.

Crossing Borders: Towards the Globalization of Security

Fri, 29 Jun 2007 18:30:00 +0000

Debate the challenges of transnational ethics and safety and learn how to transform yourself technically, politically, legally and efficiently into a truly global force for Internet security at the 20th Annual FIRST Conference in Vancouver, Canada.

FIRST Abuse-Handling SIG held its latest workshop in Seville

Fri, 22 Jun 2007 17:22:00 +0000

SIG members took forward projects like whitelisting known-good large mailservers, and the concept of feedback-loops. The workshop, well-attended by an enthusiastic number of members, also initiated steps towards a new relationship with the APWG.

CSIRT Metrics Special Interest Group page and news channel released

Thu, 21 Jun 2007 13:00:00 +0000

By defining measures for effectiveness, identifying appropriate performance metrics, and determining appropriate approaches for evaluating systems, this metrics SIG aims to improve CSIRT incident management practices within the FIRST community.

New version of Common Vulnerability Scoring System released

Wed, 20 Jun 2007 02:00:00 +0000

Seville Spain – June 20, 2007: Millions of computer users worldwide will enjoy more secure virtual experiences and transactions with the advent today of CVSSv2 – the latest version of the Common Vulnerability Scoring System.

New SIG on CSIRT Metrics

Tue, 12 Jun 2007 15:04:00 +0000

A new SIG is being established to bring together interested members in the FIRST community to discuss and identify approaches for evaluating CSIRTs and incident management practices within FIRST.

New vendor demonstrations for 2007 FIRST Conference in Seville

Thu, 05 Apr 2007 00:00:00 +0000

Matta, who joins the FIRST Sponsorship Team this year, will participate at the Vendor Booths and Beer 'n Gear, along with other sponsors. There are still sponsorship opportunities available, please visit the Conference Sponsorship web page.

Spanish companies show support for the 2007 FIRST Conference in Seville

Mon, 12 Mar 2007 20:00:00 +0000

RedIris, La Caixa and Panda Software are now sponsoring our conference. Our thanks to all of our current sponsors for their valuable support. There are still sponsorship opportunities available, please visit the Conference Sponsorship web page.

CVSS Scores and Calculators

Fri, 01 Dec 2006 14:25:00 +0000

Several sites provide easy ways to get CVSS scores. The major ones are listed on the SIG website.

Guidelines for Internet Infrastructure Vendors-Coordination Centers Relationship released

Thu, 26 Oct 2006 15:00:00 +0000

The Internet Infrastructure Vendors SIG released this best practice, as the industry sees it, in the area of product vulnerability coordination. More specifically it covers multi-vendor coordination on the world wide scale.

FIRST Special Interest Groups Framework released

Fri, 22 Sep 2006 20:30:00 +0000

The four newest SIGs (Abuse Handling, Artifact Analysis, Law Enforcement/CSIRT Cooperation and Network Monitoring) and the FIRST SIG framework establish new channels for discussion on security.

October Technical Colloquium program available

Tue, 19 Sep 2006 15:40:00 +0000

Plenary Sessions, Security Workshop and FIRST/TRANSITS Course program are available on FIRST website. The TC will be held in October 7-12th in Rio de Janeiro, Brazil.

Call for Papers for the 19th Annual FIRST Conference

Tue, 19 Sep 2006 15:32:00 +0000

The conference program committee solicits original contributions based on the theme of Digital Privacy. Submissions should be sent before November 15th.

Sponsorship opportunities for the 19th Annual FIRST Conference

Tue, 19 Sep 2006 15:31:00 +0000

Sponsorship at FIRST Conferences opens to the doors to gain focused access to a highly influential group of IT Security practitioners and Computer Security Incident Response Experts from around the globe.

Four new Special Interest Groups (SIGs) within FIRST

Thu, 07 Sep 2006 00:31:00 +0000

FIRST community has identified 4 new SIGs: Abuse Handling SIG, Artifact Analysis SIG, Law Enforcement/CSIRT Cooperation SIG and Network Monitoring SIG. More information are available in Global Initiatives

19th Annual FIRST Conference website available

Wed, 09 Aug 2006 23:00:00 +0000

Private Lives and Corporate Risk - have a glimpse on what's coming next year in Seville, Spain. Call for papers and Sponsorship opportunities are available at the conference website.

Corporate Executive Program Refines Global Risk Index

Fri, 12 May 2006 16:32:00 +0000

The momentum continues on Day Two of the CEP’s Global Risk Summit Gleneagles as the group refined the Global Risk Index (GRI), which will be published to members shortly.

Corporate Executive Program's Global Risk Index Takes Center Stage Today at Gleneagles, Scotland

Thu, 11 May 2006 06:32:00 +0000

Operating under the auspices of FIRST, the CEP takes a cross functional approach to risk management by seeking to bridge the gap between the technical and business areas of global companies.

Last day for Early Registration to the 18th Annual Conference

Tue, 25 Apr 2006 00:00:00 +0000

This is the last opportunity to have a $300 discount for the Baltimore Conference. Early Registration ends on April 25th 18h00 GMT+1

FIRST Global Initiatives now more evident

Mon, 24 Apr 2006 19:00:00 +0000

Check on the FIRST regional and global Initiatives worldwide

Check the latest updates of FIRST website

Mon, 24 Apr 2006 18:00:00 +0000

The content updates on FIRST website are now listed on What's new section, available in HTML and RSS