Forum of Incident Response and Security Teams

Address: Morrisville, North Carolina, 27560-1187 United States of America


Stakeholder group: NGOs and associations

The Forum in Incident Response and Security Teams (FIRST) is a nonprofit corporation established with the aim to enable incident response teams to more effectively respond to security incidents by providing access to best practices, tools, and trusted communication with member teams. 

Within the framework of FIRST, computer incident response teams cooperatively handle computer security indicents and promote incident prevention programmes. Team members also develop and share technical information, tools, methodologies, processes and best practices, and cooperate with the view to promote a safer and more secure global electronic environment.

Activities undetaken by FIRST are aimed, among others, at: promoting the development of quality security products, policies, and services; developing best computer security practices; and promoting the creation and expansion of  indicents response teams and membership from organisations from around the world. 

FIRST works to help members standardise incident response processes and activities, by contributing to external standard-development efforts, and encouraging memebrs to develop and publish standards within the organisation. The organisation also undertakes capacity development activities, through its Education Program and its Fellowship Program. Moreover, it participates in Internet governance processes such as the Internet Governance Forum (IGF), mainly by providing context, best practices, and information around the role of security teams.