Raleigh 2017 FIRST Technical Colloquium

Raleigh (US), March 02-03, 2017

IBM is hosting a 2 day FIRST TC for PSIRTs in Raleigh, North Carolina on March 2nd and 3rd, 2017.

The central theme of the meeting is bringing PSIRTs, Customers, Open Source developers, and 3rd Party Researchers together to build better relationships an promote security discussions beneficial to all.

Working Agenda:

1. PSIRTs coming together to:

• Build better team to team relationships Discuss current issues
  • CVSS version 3 status and use
  • Coordinated Disclosure - Multi-Party, now what about
• Bi-lateral and then Notifications
  • Discrete vulnerability communications, have we progressed and favorite ticketing systems
  • Reporting to customers on releases
  • Interactions with Open Source development teams and third party software, are we making in roads
  • Assessing product security, are we part of Secure Development
  • PSIRT Services Framework - Group discussion and review
  • Product security in the Cloud, does it differ, lessons we can share (Cloud Security Alliance??)
  • Interactions with External Vulnerability Reporters

2. Attract companies who are interested in establishing PSIRT Operations:

• New to the PSIRT process
• Developing a PSIRT
• Improving current PSIRT
• Justifying the size and scope of a PSIRT operation

3. PSIRT Birds of a Feather Session

• IBM will provide a list of topics or question to be discussed. This list will be provided before the meeting so teams can prepare to participate in a discussion

4. Bring customers and/or consumers into the discussion:

• What do customers want from PSIRT
• How to improve communications between customers and PSIRTs

5. Initiate conversations between Open Source developers, PSIRTs, and Consumers:

• Improving communications between Open Source developers and PSIRTs

---

Call for Speakers

The TC is open to both FIRST members and non-members. If you would like to submit a proposal to present at the TC, please submit the following information to raleigh-tc@first.org

• Name
• Company/Team
• Title with Brief Abstract

---

Location