The Evolution of PSIRT

Call for Proposals - Open

This is a call for submissions for the 2022 FIRST Symposium on Product Security Incident Response Team (PSIRT), September 27-29, 2022. The event will be held at the SAP Headquarters in Newtown Square, PA, USA. There will be two days of plenary sessions. This event will be open to both FIRST members and non-members around the world.

Virtual and on site participation will be available for both speakers and participants. Proceedings will not be recorded. No press will be admitted. Speakers may stipulate that their sessions be treated as confidential and all attendees are expected to respect this. Breaches of the FIRST Code of Conduct (including failing to respect the confidentiality of certain sessions) have consequences.

Point of Contact

Questions about submission topics or sensitivity issues can be sent via email to the chair of the Program Committee: PSIRT-TC-2022@first.org

• Program Chair: Steve Brukbacher
• Program Committee: Edward Hawkins, Emer O’Neill, Kevin Hagopian, Veronica Teklai, Vic Chung

Call for Proposals

The theme for the event is The Evolution of PSIRT

FIRST is looking for speakers that would like to present on topics related to PSIRT including:

• Cloud Technology and its impact on PSIRT Team
• Cyber Fusion Center Operations
• Inclusive Hiring and Retention
  • Topics could include Neurodiversity, Gender, Disability, Work-life balance etc
• Managing Cybersecurity Employee Emotional Health
• Virtual Work Topics
• CVE Topics: Evolution & Next Steps
• PSIRT Data Tracking and Automation
• Best practices in retaining PSIRT talent with work-life balance
• PSIRT and cloud vulnerabilities
• PSIRT and its relations in Security Fusion Center
• Product-focused threat intelligence
• Software Bill of Materials Requirements/Methodologies
• Diversity in Hiring and Retention
• Government Regulation Affecting PSIRT Activities
• Responsible & Coordinated Vulnerability disclosure practices
• PSIRT and Secure Development Lifecycle (SDL) coordination best practices
• Use of CVSS and CVE in managing vulnerability disclosure
• PSIRT organization structure and operations
• Lessons learned in handling high-priority cases over the last year

FIRST does not require you to submit a formal paper for consideration. However, your submission must provide enough detail to, at least, let the reviewers understand:

• What problem is this addressing?
• How does this help? Who will benefit?
• What will attendees learn? You must provide an abstract (no more than 200 words) and a detailed outline (at least 10 lines) to explain what the talk is about in a way that makes people interested in hearing it.

You are welcome to include additional material to support your proposal (e.g. a whitepaper, a draft paper, a workshop guideline, etc.). The clearer your ideas are organized and presented, the better reviewers can comprehend and evaluate your proposal.

Submissions must be complete by the closing date (see Important Dates or they will be rejected. You are therefore encouraged to submit two weeks earlier, to give us time to check and let you know if you have not provided sufficient information for the reviewers to assess.

CFP Timeline

• Call for Papers Opens: June 17
• Call for Papers Closes: August 12. Send Proposals to PSIRT-TC-2022@first.org
• Acceptance Notifications: week of August 15
• Draft Presentations Due for PC Review/Approval: Week of September 1

Speaker Privileges

Accepted presentations will receive one complimentary registration pass. FIRST does not contribute to travel, accommodation or other expenses.