European Computer Security Incident Response Teams (CSIRTs)

Summary of the initiative

Name
European Computer Security Incident Response Teams (CSIRTs)
Objective(s)
To improve the security posture of the European Information Technology (IT) infrastructure; To enable an appropriate and timely response by CSIRTs to attacks upon the European IT infrastructure; To raise the awareness by documenting the work of CSIRT.

Description of the Initiative

Obsolete case
    Sector

    Sector

    Contact Point - Commission
    MARKT E.2.

    Self/Co-Regulation Basic Act

    LEGISLATIVE ACT
    Year
    2000
    Title of Act
    Directive 2000/31/EC of the European Parliament and of the Council of 8 June 2000 on certain legal aspects of information society services, in particular electronic commerce, in the Internal Market (Directive on electronic commerce); Official Journal L 178, 17/07/2000, p. 1-16.
    Review, Revision or Sunset Clause Year
    2003
    PRIVATE ACT
    Year
    2002
    Title of Act
    ECSIRT Code of Conduct

    Geographical Coverage

    Global coverage
    Participating Countries
    Germany

    Description

    Problems that lead to the introduction of Self/Co-Regulation and the adoption of the Founding Act
    Networks, systems as well as their applications are complex, disruptable and the target of intentional attacks is a growing threat. There is a need for co-operation between European Computer Security Incident Response Teams (CSIRTs).
    Target Group(s)
    Networked systems and communications.
    Type of Instrument(s)
    Code of Conduct.
    Level(s) at which private rules should be defined and applied
    Type of Financing
    -
    Type of Monitoring
    Conduct an initial survey of compliance capacity of future regulateesConduct regular visits and spot checksInitiate complaints proceduresMaintain database of those bounded by the normsProduce regular reportsReceive complaints and verify if norms were breached or notReflexive dialogue with the - stakeholdersOther
    European Commission
    National public authority
    International public authority
    Private regulator (code owner)
    Private independent party with a mandate (e.g. auditors)
    Self-appointed private parties (e.g. NGOs)
    Succinct description of the type of Monitoring
    -
    Type of Enforcement
    Faming, shaming and blamingJudicial sanctionsMembership suspension/exclusionPrivate finesOther
    Private Regulator
    Private independent party with a mandate (e.g. auditors)
    Court system
    Alternative dispute resolution (ADR) / Online dispute resolution (ODR)
    Succinct description of the type of Enforcement
    -

    Results of Commission Monitoring

    Link / Reference of Evaluation
    -

    Downloads

    SMO self- and co-regulation database - private code 52