1
Oct - Dec 2022
Bringing together Security and Incident
Response teams from around the globe.
Traffic Light Protocol Version 2.0
is Now Available
This summer, the FIRST TLP Special Interest Group
TLP Special Interest Group (FIRST TLP-SIG) to
• Removed synonyms and colloquialisms to improve
accessibility for non-nave English speakers and
ease of translaon.
• Focused on consistent language and terminology,
adding community, organizaon, and client
definions.
• Added a colors table to include RGB, CMYK, and
hexadecimal color codes.
• TLP:WHITE has become TLP:CLEAR.
• Added the TLP:AMBER+Strict label to only highlight
informaon restricted to the recipient’s
organizaon.
2
Some of the changes in the TLP version 2.0 may impact
the industry’s current tools. However, FIRST hopes the
industry embraces this update quickly and will be fully
in use by January 2023. Indeed major players such as
CIRCL or CISA have already announced that they will
be switching to the new standard. The more people
accept the protocol, the more smoothly incidents can
be coordinated and resolved with minimum anxiety.
TLP here.
community, inside companies, inside business sectors,
that are easy to use, simple to understand, and
updated and modernized TLP version 2.0 does just
that.
"Since release, we are grateful to the FIRST members who have volunteered to provide us with translations of
TLP version 2.0 into Brazilian Portuguese, Dutch, French, Japanese, Norwegian, Romanian, Spanish, and
Swedish. And no doubt, more to follow. As SIG chairs, we are more than happy with this quick uptake."
Don Stikvoort, FIRST TLP-SIG Co-Chair
FIRST delivers training in Uganda, and the Western
Balkans
always a pleasure to experience the hospitality of the
Uganda teams.
Volunteers deliver several training sessions throughout
the year on behalf of FIRST. This training occurs at
events and conferences or due to requests from
teams.
3
-
-
here
training@first.org
• Find valuable sources of informaon
• Design and implement effecve processes to
handle collected informaon
• Choose the best approaches to combine data
• Apply automaon to achieve the opmal results in
the relevant environment
• Analyze malware using tools and frameworks like
MWDB and Karton
4
Peter Lowe speaks about DNS Abuse at ICANN75
AGM in Kuala Lumpur
Peter Lowe, newly appointed FIRST DNS Abuse
Assigned Names and Numbers (ICANN) in Kuala
Lumpur, Malaysia in September. ICANN is an
highlighted by the ICANN president and CEO during
to join the DNS Abuse SIG here.
“It was very advantageous for FIRST to have a
presence at this conference as it enabled us to
share our expertise, raise awareness of our
work, and build relations with influential
people and organizations who will help us to
fulfill our vision. I met many people from our
industry and spread the word about the
excellent work that FIRST does. Many people
were curious about what we do, especially in
our DNS Abuse Special Interest Group.
"I look forward to participating in future
events and making progress on the
relationships I built at this one,”
Peter Lowe, FIRST DNS Abuse Ambassador
5
FIRST Chair Sherif Hashem
par�cipates in the Cyber
Diplomacy and Norms panel
at The Second Community of
African Cyber Experts
measures (CBMs). He highlighted the importance of
central role in empowering and strengthening cooper-
CBMs.
-
FIRST Virtual Symposium for
November 1-3, 2022
here.
The World Opens - FIRST Events Round Up
6
FIRST Regional Symposium Europe will be held January
here
exchange among incident responders and security
enhance capacity building and contribute to building
importance of building bridges to support networking
here
member Michael Hausding will represent the
cybersecurity industry at the 10th Regional
Cybersecurity Summit in Oman & the FIRST &
ITU-ARCC Regional Symposium for Africa and Arab
Regions 6 – 9 November 2022 in the Sultanate of
Désirée Sacher-Boldewin
Olivier Caleff
Special Interest Groups Update
and New NETSEC SIG Formed
website
here
7
The Board meets in Davos
Board of Directors Organiza�on and Roles for 2022/23
Désirée Sacher-Boldewin
Mona Elisabeth Østvang
Olivier Caleff
Tracy Bills
Sherif Hashem
Serge Droz
Michael
Hausding
Olivier Caleff
Audrey Mnisi Mireku
8
Lastly, a team of four support the Board – Chris
Gibson, CEO, Nora Duhig, Dave Schwartzburg, and
Klée Aiken - whose roles and responsibili�es are in the
table below.
Trey Darley will lead on Governance & Bylaws and
Standards and join the Diversity & Inclusion group.
Serge Droz will also focus on the Policy work with
Sherif, on top of his Vice Chair role.
Yukako Uchida will lead on the Hall of Fame, Outreach
for APAC and join the Diversity & Inclusion group.
Chair / Vice Chair
CFO / Vice CFO
Secretariat
Membership Liaison
Fellowship Program
Hall of Fame
Standards (FIRST/ISO)
Governance/Bylaws
Conference Chair
Outreach:(Symposia Liaison,
TC Liaisons, Training
Delivery, Membership)
SIGs
Privacy Officer
Educa�on & Training
Policy
Communica�ons/PR
Sanc�ons
Diversity & Inclusion
Volunteer Management
Alterna�ve Revenue
Infrastructure
Sherif Hashem
Michael Hausding
Nora Duhig
Olivier Caleff
Tracy Bills
Yukako Uchida
Trey Darley
Trey Darley
Tracy Bills
Africa, Middle East:Audrey Mnisi Mireku
APAC: Yukako Uchida
Europe: Mona Elisabeth Østvang
Americas,Oceania: Tracy Bills
Désirée Sacher-Boldewin
Dave Schwartzburg
Mona Elisabeth Østvang
Serge Droz
Olivier Caleff
Sherif Hashem
Audrey Mnisi Mireku
Chris Gibson
Trey Darley
Dave Schwartzburg
Serge Droz
Olivier Caleff
Tracy Bills
Olivier Caleff
Olivier Caleff
Désirée Sacher-Boldewin
Klée Aiken
Klée Aiken
Klée Aiken
Klée Aiken
Olivier Caleff
Tracy Bills, Olivier Caleff
Sherif Hashem
Chris Gibson
Serge Droz, Chris Gibson
Mona Elisabeth Østvang, Yukako Uchida, Trey Darley
Michael Hausding, Sherif Hashem
PRIMARY ALTERNATE / VICE
9
July - August
- Pfeiffer Vacuum CSIRT, DE sponsored by CERT-Bund and
ComCERT
- Mallory Knodel, US sponsored by Zendesk
- Mar�n Nagel, CH sponsored by Swisscom CSIRT
- LEGO CSIRT, DK sponsored by OxCERT and NCSC UK
- CSIRT-SATEC, ES sponsored by INCIBE-CERT and BCSC
- Health-ISAC, US sponsored by Team Cymru and Z-CERT
- Global CERT Atos, PL sponsored by Siemens-CERT and
CERT Polska
- VOID SOC, SK sponsored by SK-CERT and DNSC
September
- Art Manion (Liaison), US sponsored by Panasonic PSIRT
- AQUA INTERACTIVE CERT, MX sponsored by TIC-
Defense-CERT and CSIRT-RD
- TI America CSIRT, MX sponsored by CSIRT-CEDIA and
BA-CSIRT
- CERT Nameshield, FR sponsored by CERT Credit Agricole
and Orange-CERT-CC
- SOFISTIC-CSIRT, ES sponsored by INCIBE and
NUNSYS-CERT
- Kyndryl CSIRT Iberia, ES sponsored by INCIBE and
CCN-CERT
- POLI-CERT, IT sponsored by ESACERT and CERTBI
- Aitu PSIRT, KZ sponsored by KZ-CERT and NBRK KZ CERT
- CERT CM EI, FR sponsored by CERT Credit Agricole and
CERT SG
- Sophos Security Team , GB sponsored by NCSC UK and
Mandiant Security
- AXUS-CSIRT, PE sponsored by CSIRT-CEDIA and BA-CSIRT
- Onevinn MDR, SE sponsored by CERT-SE and LiU IRT
If you are not yet a member of FIRST and are interested in
joining you can find more informa�on here.
Twenty new members join FIRST
We now have 651 teams in 101 different countries worldwide in our membership. Exis�ng members can find
the complete list of members on the FIRST portal.
Thanks for reading!
Remember to follow us on our social media channels Facebook,
Twitter and LinkedIn for regular updates!
