FIRST Members

Message from the Chair; Conference Roundup; Special Interest Groups; Weekend Training; Training on DNS Prevention, Detection, Disruption and Defense; Diversity and Inclusion; New Board Member Introduction; M3AAWG 58 Meeting; 36th Annual FIRST Conference to take place June 9-14, 2024 in Fukuoka, Japan; New Members; Standards; Communications; Upcoming Events.

October 9th, 2019 – As the year draws to a close, it is time for businesses across all industries and sectors to reflect and prepare for the upcoming new year. With this in mind, premier organization and recognized global leader in incident response - Forum of Incident Response and Security Teams (FIRST) has produced 11 vital steps that organizations should take to improve their incident response strategy.

September 18th, 2019 – At FIRST we strongly believe that in order to build a global cybersecurity incident response community, from which every company or user participating in the Internet can benefit, we should all work to limit the impact of sanctions or export regulations on incident responders. This includes being a forum where technology corporations such as Huawei, have the ability to participate the same as others.

The Forum of Incident Response and Security Teams releases its third annual report, covering the scope of its activities from the 2018 conference in Kuala Lumpur, through its 2019 annual event in Edinburgh.

We’re kicking off the first episode of this year’s podcast with the man of the moment, Andrew Cormack, program chair of the 31st Annual FIRST Conference! Chris John Riley and Martin McKeay return as our podcast hosts once again and pick up where they left off almost a year ago during their last chat with Andrew. The guys touch on the program selection process, highlights of this year’s program, and what new things attendees will experience this year. Andrew is the Chief Regulatory Adviser at Jisc and a long time member and supporter of FIRST and the IR community.

The Forum of Incident Response and Security Teams (FIRST), which brings together incident responders from around the world, invested in the creation of a new training course “DDoS Mitigation Fundamentals”. Authored by Krassimir T. Tzvetanov, a recognized expert in the field, the training teaches incident responders to handle attacks and securing their organisations.

Join this week's interview in progress! Chris and Martin chat with Chad Loeven, VP of Sales & Marketing at VMRay. Chad talks VMRay, their mission, and why they got involved with FIRST and how it has become one of their favorite communities to be a part of. VMRay has been a supporter of the FIRST community and conference since 2016. Be sure to visit with them in the exhibit area.

May 28th has come and gone…Thomas Fischer, independent data protection advocate talks GDPR. How do you define personal data? Who is accountable? What is actionable and fineable? Join the interview in progress and be sure to join Thomas on Thursday, June 28th from 11:00-12:00 in the Management/Privacy Track for what is sure to be a lively discussion.

Let's get things rolling with this season's podcast series! Chris John Riley and Martin McKeay return as our hosts. Episode 1 features 2018 Program Chair, Jeffrey Carpenter. Jeff is Senior Director of Threat Intelligence and Incident Response Consulting at SecureWorks and has been an active member, supporter, and all-around various hat-wearer of FIRST over the years. Jeff talks program goals, session insights, and things to expect at this year's 30th anniversary celebration event.

The event offers conferences, keynote presentations and activities designed to maximize network opportunities and information exchanges on information security and incident response.

The FIRST Board of Directors recognizes and shares the concerns of members and event attendees about recent changes in US immigration policy. We believe global participation is a prerequisite to developing strong and successful responses to internet security issues.

The Forum of Incident Response and Security Teams (FIRST), a recognized global leader in incident response has successfully finished its 28th Annual Conference, which takes place this June (12th – 18th) in Seoul, South Korea. Co-hosted by the MSIP (Ministry of Science, ICT and Future Planning), KISA (Korea Internet Security Agency) and KrCERT/CC, the conference was held at Conrad Seoul.

FIRST is thrilled to announce the return of General Dynamics Fidelis Cybersecurity Solutions as a Gold Sponsor for 2015. The organization has been proudly supporting the annual FIRST conference and community since 2011. We look forward to having their team with us in Berlin.

FIRST would like to welcome two new sponsors to the 2014 Sponsorship Team: Lookingglass (www.lgscout.com) and CyberSponse (www.cybersponse.com). Both organizations are joining us at the Gold level and will be exhibiting during conference week.

FIRST would like to welcome back Adobe to the FIRST 2014 Sponsorship Team. Adobe has been a sponsor of FIRST since 2010 Miami. New to the team for 2014 is Co3 Systems with a Banquet sponsorship. This is their first time sponsoring at the annual conference.

FIRST welcomes back two organization to the 2014 Sponsorship Team. CIRCL (Computer Incident Response Center Luxembourg) has been sponsoring the FIRST conference since 2012 and returns to the 2014 team as a supporting sponsor. General Dynamics Fidelis will also be joining us in Boston at the Gold Sponsor level. General Dynamics Fidelis has been a sponsor of the annual conference since 2011. We give great thanks to both organizations for their continued support of the annual conference and of FIRST’s mission.

FIRST would like to welcome back and thank SAP for their continued support of the annual conference. SAP has been sponsoring the annual FIRST conference since 2011 and returns to the 2014 Sponsorship Team as a supporting sponsor. FIRST would also like to give thanks to first time exhibitor, BrandProtect for their support of the upcoming 2014 conference.

  • Grupo de Respuesta a Emergencias Cibernéticas de Colombia (colCERT), Colombia
  • Security Operations Center - Cyber Operations Command Joint (SOC-CCOC), Colombia
  • Box Incident Response Team (Box IRT), US
  • Mandiant, US
  • CARICERT, Curaçao
  • Swedish Armed Forces CERT (FM CERT), Sweden

The 2014 Call for Speakers is open for the 26th Annual FIRST Conference: Back to the ‘root’ of Incident Response. More information regarding presentation qualifications can be found at the above link. Submissions are due by December 23, 2014.

FIRST announces the launch of the FIRST Fellowship Program, which will enable information security incident response teams from the world’s least developed countries (LDCs) to become part of the global incident response community.

Welcome to our new teams Orange-CERT Coordination Center sponsored by CERT-IST and CERTA and Maybank IT Security and Incident Management team (MBBCERT) sponsored by MyCERT and E-Cop. Thank you to the sponsors for your time and effort on behalf of FIRST.

Please welcome new team Commonwealth Bank of Australia (CBAcert) and join us in thanking their sponsors Microsoft and McAfee. Also, Steve Adegbite is now a FIRST liaison member.

Please welcome new teams from the Abu Dhabi Police CERT sponsored by aeCERT and ETISALAT-CERT and TechCERT, Sri Lanka sponsored by JPCERT/CC and Team Cymru!

Please welcome our new teams Mitsui Bussan Secure Directions, Inc. Security Incident Response Team (MBSD-SIRT), Japan sponsored by JPCERT/CC and HIRT. Also, Cámara Colombiana de Informática y Telecomunicaciones CSIRT-CCIT (Colombian Informatics and Telecommunications Chamber), Colombia sponsored by NeuCERT and CSIRT ANTEL. We also have a new liaison member - Ruediger Riediger of Germany who was sponsored by PRE-CERT. A special thanks to their sponsoring teams as well!

Please welcome the following SEVEN teams and join us in thanking their sponsors who have worked so hard to help bring them into the FIRST Community!

• Equipo de Respuesta a incidentes de Seguridad de la Información del CCG de MAPFRE (MAPFRE-CCG-CERT, ES) sponsored by CCN-CERT (ES) and IRIS-CERT (ES)

• CERT.GOV.AZ Computer Emergency Response Team (AZ) sponsored by CERT-UA (UA) and RU-CERT (RU)

• CERT-MX (MX) sponsored by IRIS-CERT (ES) and e-LC CSIRT (ES)

• Telefonica CSIRT(ES) sponsored by IRIS-CERT (ES) and e-LC CSIRT (ES)

• TP CERT - Telekomunikacja Polska Computer Emergency Response Team (PL) sponsored by CERT POLSKA (PL) and Team Cymru (US)

• Singapore Infocomm Technology Security Authority Incident Response Team SITSA-IRT, (SG) sponsored by SingCERT (SG) and SAFCERT (SG)

• NGRID (UK) sponsored by Team Cymru (US) and Citi CIRT (US)

FIRST would like to welcome the following new teams: FortiGuard (Canada) sponsored by Adobe and IBM; Facebook (USA) sponsored by Paypal and e-Bay and Danish GovCERT (Denmark) sponsored by NorCERT and DK-CERT.

FIRST would like to welcome the Department of Justice, Security Operations Center (JSOC) DOJCERT as it’s newest member team. Special thanks to sponsors GE-CIRT and DOE-CIRC.

FIRST would like to welcome the following teams and thank their sponsors: PayPal Incident Response Team (PayPal IRT) and eBay Global Information Security Monitoring and Response Team (eBay CERT) both sponsored by Adobe and IBM; JACKSECURITY Incident Response Team (JACKSIRT), Peru sponsored by Juniper SIRT and Team Cymru; Equip de Resposta d'Incidents del Centre de Seguretat de la Informació de Catalunya (Information Security Centre of Catalonia (CESICAT-CERT)), Spain sponsored by La Caixa and CCN-CERT; and ICANN CIRT sponsored by CERT.at and SWITCH-CERT.

This month we would like to welcome five new members from around the globe. Thank you to all of the applicants and their sponsors: Scott McIntyre (liaison) sponsored by KPN-CERT; Packet Clearing House (PCH), USA sponsored by Team Cymru and Cisco PSIRT; Computer Security Incident Response Team First National Bank (FNB), South Africa sponsored by SURFcert and AAB GCIRT; Huawei Network Security Incident Response Team (Huawei NSIRT), China sponsored by CNCERT/CC and CMCERT/CC; Korea Education and Research Information Service KERIS (ECSC), Republic of Korea sponsored by KrCERT/CC and MyCERT.

Please welcome the newest FIRST teams: mnemonic Incident Response Team (mIRT) sponsored by NorCERT and UNINETT and The University of Warwick Computer Security Investigation and Incident Response Team (WAR-CSIIRT) sponsored by OxCERT and Team Cymru.

The United Arab Emirates Computer Emergency Response Team (aeCERT) sponsored by Symantec CERT (SymCERT) and MyCERT and Internet Identity (IID), USA sponsored by Boeing (BCERT) and AusCERT.

FIRST would like to welcome the new members of the FIRST Steering Committee and FIRST.org Inc Board of Directors: Robert Schischka of CERT.at (Austria) and Reneaué Railton of Cisco (USA). We would also like to welcome back our re-elected members: Chris Gibson of Citi CIRT (USA/UK), Pete Allor of IBM (USA) and Steve Adegbite of Microsoft (USA) who was re-elected as the SC Chair.

Continuing for another year will be Kurt Sauer of Spinlock Technologies (Japan), Tom Mullen of BT (UK), Yurie Ito of ICANN/JPCERT/CC (Japan), Ken van Wyk of KRvW Associates (USA) and Jordi Aguila of e-LC CSIRT (Spain).

Special thanks to Jeff Boerio of Intel for interest in running -- and to Derrick Scholl and Scott McIntyre for their years of service to FIRST!

BANELCO Computer Security Incident Response Team (CSIRTBANELCO) of Argentina; General Electric Computer Incident Response Team (GE-CIRT) of the USA and Oman National CERT, Sultanate of Oman. We would also like to thank the sponsoring teams: ArCERT, CSIRT Antel; NGFIRST, NCSA-IRST; MyCERT and SingCERT. We'd also like to welcome back the Israeli Government CERT CERTGOVIL!

CERT Estonia (CERT-EE) sponsored by SI-CERT and CERT-FI; HSBC Rapid Emergency Action Crisis Team (REACT), USA sponsored by Citi CIRT and Goldman Sachs and Trustwave SpiderLabs CIRT (TWSL-CIRT), USA sponsored by NU-CERT and IBM. Please join us in welcoming the new teams and thanking their sponsors!

This is a great opportunity to participate and be a part of the conference, please send your suggestions to Peter Allor at peter.allor@first.org. The theme winner will receive a complimentary registration to the 2011 conference. Suggestions are due by March 31st and the winner will be announced in April. And mark your calendars for attending the conference. The dates are June 12 to 17, 2011!

CERT BWI (Germany) sponsored by CERTBw (CERT German Armed Forces) and Siemens CERT; Computer Emergency Response Team of the Swiss Government (GovCERT.ch), Switzerland sponsored by CERT-Bund and IP+ CERT; Research In Motion, Corporate Security - Information Security Operations Centre (RIM CS-ISOC), Canada sponsored by TDBFG CSIRT and Bell IPCR; CERT Societe Generale (CERT SG), France sponsored by CERTA and dbCERT.

Canadian Imperial Bank of Commerce - Computer Incident Response Team (CIBC CIRT), Canada sponsored by RBC FG CSIRT and BMO ISIRT;

Sistema Nacional de Gestión de Incidentes Telemáticos (Computer Incident Management National System - VenCERT), Venezuela sponsored by ArCERT and CCN-CERT ;

and Lithuanian National Computer Emergency Response Team (CERT-LT), Lithuania sponsored by LITNET CERT and CERT-FI.

Effective October 1st: · KIT-CERT (Karlsruhe Institute of Technology Computer Emergency Response Team), Germany · ECS-CSIRT (Electronic Communications Security, National Intelligence Agency, Government of South Africa) . HR-CERT (Croatian National CERT) · IT-ISAC (Information Technology Information Sharing and Analysis Center), USA

FIRST thanks the sponsors for their efforts and look forward to the active participation of the new members!

Please join us in welcoming the newest FIRST members: mixi Incident Response Team (Japan); CERT NIC.LV (Latvia); Cyber Defense Institute Incident Response Team (CDI-CIRT), Japan and Liaison Member Gary Lawlor (Canada). Congratulations!

Please join us in welcoming the newest FIRST members: Effective February 1st is full team member Portcullis Computer Incident Response and Forensics Team (PCIRF), UK and Liaison Members Ken Van Wyk, USA and Bernie Rosen, USA. FIRST thanks the sponsors for their efforts and we look forward to the active participation of Portcullis and continued support from Ken and Bernie!

New Member Update! Please join us in welcoming the following new members to FIRST: Effective December 1st: UiO-CERT (University of Oslo), Norway and Rakuten-CERT, Japan. New members in January 2009 include: Adam Laurie, UK (liaison and formerly of the Bunker team); INTECO-CERT, Spain; MSIRT (Moneris Solutions), Canada and SecOps (Shell IT Services), Malaysia. FIRST thanks the sponsors for their efforts and look forward to the active participation of the new members!

The world’s economic woes haven’t stopped unprecedented levels of sponsorship being pledged for the 21st Annual Conference of FIRST with six months still to go before proceedings open on June 28, 2009, in Kyoto.

Please join us in welcoming the newest FIRST members: Effective September 1st is full team member IPA-CERT, Japan and effective October 1st are full team member Barclays Information Security and Privacy Incident Response and Investigations Team (ISPIRIT), UK and Liaison Member Kees Leune, USA. FIRST thanks the sponsors for their efforts and look forward to the active participation of the new members!

Two new national CSIRTs - CERT.at from Austria and SLCERT from Sri Lanka - have joined FIRST as full members. FIRST thanks the sponsors for their efforts and look forward to the active participation of the new members!

26 June – Steve Adegbite from Microsoft (USA) was the newest member elected to the FIRST SC for the 2008-2010 term. Also re-elected were Peter Allor from IBM (USA), Scott McIntyre from KPN-CERT (NL), Chris Gibson from Citigroup (USA/UK) and Derrick Scholl from Sun Microsystems (USA). Derrick Scholl and Chris Gibson will continue their roles as President/Chair and CFO/Treasurer, respectively. A fond farewell and thank you to Liliana 'Nina' Solha – who decided not to run for re-election after serving 6 years on the FIRST SC and heading up the website efforts and various TCs and programs throughout Latin America.

Pepijn Vissers (Netherlands) has recently affiliated to FIRST as a liaison member. FIRST thanks the sponsor GOVCERT.NL for its support and looks forward to the active participation of the new member!

CSIRT Banco Real - Real Bank Brazil Security Incident Response Team - has recently affiliated to FIRST as a full member. FIRST thanks the sponsors CERT.br and AAB GCIRT for their efforts, and looks forward to the active participation of the new member!

EMCs Product Security Response Center (EMC) from USA and Kakaku.com Security Incident Response Team (KKCSIRT) from Japan have joined FIRST as full members. FIRST thanks the sponsors for their efforts and look forward to the active participation of the new members!

Eric Pancer (USA) has recently affiliated to FIRST as a liaison member. FIRST thanks the sponsor NU-CERT for its support and looks forward to the active participation of the new member!

Now the latest program agenda of Joint Workshop on Security, and FIRST Technical Colloquium 2008 in Tokyo has been updated and published. We are looking forward to meeting as many of you as possible in one of the best season of the year in Tokyo, Japan!

A total of 123 registrants from 28 different countries came together for the 23rd TF-CSIRT meeting on today. 66 different FIRST teams and TERENA members were able to participate in this event hosted by Sun Microsystems. The FIRST/TF-CSIRT Seminar will continue on Tuesday.

Bell Canada Information Protection Centre Response (Bell IPCR) and Korea Financial Computer Emergency Response Team (KFCERT) have joined FIRST as full members. FIRST thanks the sponsors for their efforts and look forward to the active participation of the new members!

BrandProtect IRT (BIRT) from Canada and CESG´s Government Computer Emergency Response Team (GovCertUK) from United Kingdom have joined FIRST as full members. FIRST thanks the sponsors for their efforts and look forward to the active participation of the new members!

FIRST.org is excited to announce that Microsoft has come aboard the 2008 Conference Sponsorship Team at the Platinum level. Q-CERT also returns aboard the Team at Gold level. Our thanks to all of the sponsors for their valuable support!

NAB ITSAR - National Australian Bank IT Security Assessment and Response - has recently affiliated to FIRST as a full member. FIRST thanks the sponsors (AusCERT and VeriSign) for their efforts, and look forward to the active participation of the new member!

NRI SecureTechnologies Computer Security Incident Response Team (NCSIRT), F-Secure Security Labs (FSLab) and Yahoo! Incident Response Division (YIRD) have joined FIRST as full members. FIRST thanks the sponsors for their efforts, and look forward to the active participation of the new members!

David Mortman has recently affiliated to FIRST as a liaison member. FIRST thanks the sponsor Team Cymru for its support and look forward to the active participation of the new member!

Hosted by TERIS – Telefonica del Peru CSIRT from 13-18 October 2007 at Lima Swiss Hotel, Peru. More information about the program and location are available at FIRST website. FIRST Members may register online to attend to the event.

Hosted by MyCERT/CyberSecurity from 22-24 August 2007 at Crowne Plaza Mutiara Kuala Lumpur, Malaysia. More information about the program and location are available at FIRST website. FIRST Members may register online to attend to the event.

The Spanish Governmental National Cryptology Center CSIRT (CCN-CERT) and the Secunia CSIRT (Secunia Research) have joined FIRST as full members. FIRST thanks the sponsors for their efforts and look forward to the active participation of the new members!

The Tunisian CERT Coordination Center (CERT-TCC) and Uruguay's Telecommunications Agency CSIRT (CSIRT ANTEL) have joined FIRST as full members. FIRST thanks the sponsors for their efforts, and look forward to active participation of the new members!

CyberCIRT - Cyberklix Computer Incident Response Team - has recently affiliated to FIRST as a full member. FIRST thanks the sponsors (TDBFG CSIRT and BMO-ISIRT) for their efforts, and look forward to active participation of the new member!

Hosted by Q-CERT from 12-16 April 2007, this TC marks the inaugural FIRST event in the Middle East region. More information about the program and location are available at FIRST website. FIRST Members may register online to attend to the event

Q-CERT - the national CERT Coordination Center of State of Qatar - has recently affiliated to FIRST as a full member. FIRST thanks the sponsors (GOVCERT.NL and SingCERT) for their efforts, and look forward to active participation of the new member!

Juniper Networks joins the FIRST Sponsorship Team this year. Our thanks to all of our current sponsors for their valuable support. There are still sponsorship opportunities available, please visit the Conference Sponsorship web page.

This Colloquium will be a joint event between FIRST and GFIRST during 1-2 March 2007. FIRST Members may register online via the FIRST website to attend to the event. Register now!

CCN-CERT and IBM ISS are now sponsoring our conference. Our thanks to all of our current sponsors for their valuable support. There are still sponsorship opportunities available, please visit the Conference Sponsorship web page.

The Telefonica del Peru CSIRT has recently joined FIRST as a full member. This new addition is the seventh Latin American team within FIRST. FIRST thanks the sponsors for their efforts, and look forward to active participation of the new member!

This Colloquium will be a joint event between FIRST and the TF-CSIRT from 29-31 January 2007, in Budapest (HU). FIRST Members may register online via the FIRST website to attend to the event.

The purpose of this policy is to establish acceptable and unacceptable use of electronic devices and network resources in conjunction with its established culture of ethical and lawful behavior, openness, trust, and integrity.

The four newest SIGs (Abuse Handling, Artifact Analysis, Law Enforcement/CSIRT Cooperation and Network Monitoring) and the FIRST SIG framework establish new channels for discussion on security.

Plenary Sessions, Security Workshop and FIRST/TRANSITS Course program are available on FIRST website. The TC will be held in October 7-12th in Rio de Janeiro, Brazil.

FIRST community has identified 4 new SIGs: Abuse Handling SIG, Artifact Analysis SIG, Law Enforcement/CSIRT Cooperation SIG and Network Monitoring SIG. More information are available in Global Initiatives

October 2006 Technical Colloquia website is now available. FIRST Members may register online to attend to the event, from 07-12 October, in Rio de Janeiro - Brazil

September 2006 Technical Colloquia website is now available. FIRST Members may register online to attend to the event, from 25-27 September, in Seoul (KO)

Private Lives and Corporate Risk - have a glimpse on what's coming next year in Seville, Spain. Call for papers and Sponsorship opportunities are available at the conference website.

AhnLab is a prominent developer and provider of integrated security solutions, offering such product as Anti-Virus, Anti-Spyware, Anti-Spam, Personal Firewall, Anti-Worm Appliance and other high quality products

CERT-Hungary's public services are offered to the Hungarian government, municipalities, and businesses. The security of computer systems owned by the government and critical infrastructures receive special attention from our organisation

BP is of one of the world's largest energy companies, providing its customers with fuel for transportation, energy for heat and light, retail services and petrochemicals products for everyday items