Digital First Responders - The Role of Computer Security Incident Response Teams (CSIRTS) in Developing Countries

This document intends to provide policy makers in countries with a clear understanding of the role and importance of Computer Security Incident Response Teams (CSIRTs) for enhancing cyber resilience. It provides new information, based on recent data, on the status of CSIRT deployment across regions and income groups and outlines practical recommendations on how to establish and operate national CSIRTs, including costs and staffing.

Acknowledgements

This document was written by Ghislain de Salins, Senior Digital Development Specialist, and Robert Collett, consultant, from the World Bank Digital Development Global Practice, in partnership with Chris Gibson, Serge Droz, Olivier Caleff and Klee Aiken from the global Forum of Incident Response and Security Teams (FIRST). It was reviewed by Giacomo Assenza, Paul Seaden, and Anders Pedersen from the World Bank, as well as by Jean-Robert Hountomey (AfricaCERT) and Vilius Benetis (NRD). It builds on previous publications on incident response capacity building by ITU, OAS, ENISA, GFCE and FIRST (referenced in the last section of this document), among others. The development of this note was funded by the World Bank Cybersecurity Multi-Donor Trust Fund.

Rights and Permissions

This work is available under the Creative Commons Attribution 3.0 IGO license(CC BY 3.0 IGO) http://creativecommons.org/licenses/by/3.0/igo. Under the Creative Commons Attribution license, you are free to copy, distribute, transmit, and adapt this work, including for commercial purposes, using appropriate citation.