<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
<div class="moz-forward-container">
<pre>Dear Colleagues,</pre>
<pre>The IGF Best Practice forum for CSIRTS is seeking inputs, comments on the questions below from the community.
Please subscribe to the mailing list < <a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:bp_certs@intgovforum.org">bp_certs@intgovforum.org</a>> . You can also send you responses to <a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:project@africacert.org">project@africacert.org</a>.
</pre>
<pre><b><span lang="EN-GB">1. To what<small> degree do CSIRTs work on issues which are privacy sensitive?</small></span></b><small><span lang="EN-GB"><o:p></o:p></span>
</small></pre>
<ul style="margin-top:0in" type="disc">
<li class="MsoNormal" style="mso-list:l1 level1
lfo1;tab-stops:list .5in">
<pre><small><span lang="EN-GB">Do CSIRTs help build up privacy protections for citizens? <o:p></o:p></span></small></pre>
</li>
<li class="MsoNormal" style="mso-list:l1 level1
lfo1;tab-stops:list .5in">
<pre><span lang="EN-GB"><small>In what ways can privacy be a limiting factor for a CSIRT to<small> </small>work together with the wider community?</small><o:p></o:p></span>
</pre>
</li>
</ul>
<pre><b><span lang="EN-GB">2. What roles allocated to national CSIRT are controversial?</span></b><span lang="EN-GB"><o:p></o:p></span>
</pre>
<ul style="margin-top:0in" type="disc">
<li class="MsoNormal" style="mso-list:l4 level1
lfo2;tab-stops:list .5in">
<pre><small><span lang="EN-GB">Do CSIRT have a legitimate law enforcement function? What are the benefits and concerns?<o:p></o:p></span></small></pre>
</li>
<li class="MsoNormal" style="mso-list:l4 level1
lfo2;tab-stops:list .5in">
<pre><span lang="EN-GB"><small>Do the roles of national CSIRT differ based on where they are built? E.g. is a regulator-hosted CSIRT different than one developed
within the military, the private sector or academia?</small><o:p></o:p></span></pre>
</li>
<li class="MsoNormal" style="mso-list:l4 level1
lfo2;tab-stops:list .5in">
<pre><small><span lang="EN-GB">What CSIRT implementations are successful today?<o:p></o:p></span></small></pre>
</li>
<li class="MsoNormal" style="mso-list:l4 level1
lfo2;tab-stops:list .5in">
<pre><small><span lang="EN-GB">Is there value in having a "neutral" national CSIRT which is independent from all other organizations and run independently?<o:p></o:p></span></small></pre>
</li>
<li class="MsoNormal" style="mso-list:l4 level1
lfo2;tab-stops:list .5in">
<pre><span lang="EN-GB"><small>What is the role of a CSIRT in a conflict?</small><o:p></o:p></span>
</pre>
</li>
</ul>
<pre><b><span lang="EN-GB">3. How do differences between countries affect misconceptions around CSIRT?</span></b><span lang="EN-GB"><o:p></o:p></span>
</pre>
<ul style="margin-top:0in" type="disc">
<li class="MsoNormal" style="mso-list:l3 level1
lfo3;tab-stops:list .5in">
<pre><small><span lang="EN-GB">Does the type of government affect the type of roles allocated to CSIRT?<o:p></o:p></span></small></pre>
</li>
<li class="MsoNormal" style="mso-list:l3 level1
lfo3;tab-stops:list .5in">
<pre><small><span lang="EN-GB">Do CSIRT in the developing world focus on different services than the developed world?<o:p></o:p></span></small></pre>
</li>
<li class="MsoNormal" style="mso-list:l3 level1
lfo3;tab-stops:list .5in">
<pre><small><span lang="EN-GB">How does funding affect the effectiveness of a CSIRT?<o:p></o:p></span></small></pre>
</li>
<li class="MsoNormal" style="mso-list:l3 level1
lfo3;tab-stops:list .5in">
<pre><small><span lang="EN-GB">What are creative solutions for a lack of funding to operate a CSIRT function?<o:p></o:p></span></small>
</pre>
</li>
</ul>
<pre><b><span lang="EN-GB">4. How do CSIRT interact with policy makers?</span></b><span lang="EN-GB"><o:p></o:p></span>
</pre>
<ul style="margin-top:0in" type="disc">
<li class="MsoNormal" style="mso-list:l0 level1
lfo4;tab-stops:list .5in">
<pre><small><span lang="EN-GB">Do CSIRT typically have a dedicated liaison with the policy community?<o:p></o:p></span></small></pre>
</li>
<li class="MsoNormal" style="mso-list:l0 level1
lfo4;tab-stops:list .5in">
<pre><small><span lang="EN-GB">Where do CSIRT help influence policy, for instance by spreading awareness? Are there areas where they should not?<o:p></o:p></span></small></pre>
</li>
<li class="MsoNormal" style="mso-list:l0 level1
lfo4;tab-stops:list .5in">
<pre><small><span lang="EN-GB">How have policies internationally acknowledged CSIRTs? Do they focus on particular roles of the CSIRT?<o:p></o:p></span></small></pre>
</li>
<li class="MsoNormal" style="mso-list:l0 level1
lfo4;tab-stops:list .5in">
<pre><small><span lang="EN-GB">What policy communities are most related to the CSIRT role? Technology, economy? How can we reach them more effectively?<o:p></o:p></span>
</small></pre>
</li>
</ul>
<pre class="MsoNormal"><b style="mso-bidi-font-weight:normal"><span lang="EN-GB">5. Training<o:p></o:p></span></b></pre>
<ul>
<li><small><span lang="EN-GB">Is training available in your
country for CSIRT employees</span></small></li>
<li> <small> </small> <span lang="EN-GB"><small>If not, what
training are you in want of?</small><o:p></o:p></span> </li>
</ul>
<pre class="MsoListParagraphCxSpFirst" style="text-indent:-.25in;mso-list:l2 level1 lfo5"><span lang="EN-GB"><o:p></o:p></span></pre>
Thank you.<br>
<br>
Jean Robert.<br>
</div>
</body>
</html>