Strategy and Governance: Launch of the FIRST Strategy Framework

The Board of Directors launched in March of this year the FIRST Strategy Framework. This initiative is designed to enhance the organization’s ability to achieve its mission and reinforce its position as a global leader in cybersecurity and incident response. A key component of this framework is the development of a three-year Strategic Plan, which will be updated every three years. This Strategic Plan will then serve as the foundation for a three-year Operating and Financial Plan, which will be updated annually. Furthermore, the Annual Budget and Operational Plan will be directly informed by these strategic and operating plans, ensuring that financial resources are allocated to support strategic objectives and operational priorities. This cohesive system aims to connect FIRST’s long-term vision with its annual operational and financial planning.

Following the approval of the final text of the 2025–2027 Strategic Plan in January 2025, the FIRST Board of Directors has commenced work on the corresponding three-year Operating and Financial Plan. As this marks the initial implementation of this new strategy framework, the Operating Plan for 2025 will be based on the budget approved at the end of 2024. However, during the remainder of 2025, the Board will be focused on finalizing an updated and unified Operating and Financial Plan to cover the subsequent two years. This detailed plan will outline specific activities, timelines, responsibilities, resource allocation, and metrics to track progress toward the strategic goals defined in the overarching Strategic Plan.

This integrated strategic planning framework, with its emphasis on a regularly updated Strategic Plan and an annually reviewed Operating and Financial Plan, demonstrates FIRST's commitment to proactive planning and resource alignment. By clearly defining its strategic objectives and translating them into actionable operational plans with measurable outcomes, FIRST aims to leverage its strengths and address the evolving challenges within the dynamic cybersecurity landscape. The ongoing work of the Board in developing the three-year Operating and Financial Plan is a crucial step in ensuring the successful implementation of the newly launched Strategic Plan and in further solidifying FIRST’s role as the premier organization for incident response and security.

Carlos Alvarez
Strategy and Governance Lead
Board of Directors

Published on FIRST POST: Jan-Mar 2025