Good morning,

Today we have the opportunity of discussing the last aspect of cybersecurity: Computer Security Incident Response Teams (CSIRTs)/Computer Emergency Response Teams (CERT). CSIRTs/CERTs are responsible for preparing for, detecting, managing and responding to cybersecurity incidents as well as creating consumer awareness.

Global cybersecurity is said to be ‘as strong as the weakest link’.  Developing countries particularly in Africa have not sufficiently addressed cybersecurity issues.  While some countries have initiated efforts to develop cybersecurity capabilities through the establishment of National CSIRTs/CERTs, the CERT-TCC in Tunisia is the only active national CERT in Africa (http://www.ansi.tn/en/about_cert-tcc.htm).

In establishing a National CERT/CSIRT…

• What structure could be adopted?
• What services should be offered? 
• What elements could be considered to establish trust in this institution thereby encouraging organizations with critical information infrastructure (CII) such as government agencies, banks, educational institutions, water and power companies, etc, to share of cybersecurity incidents?

Kind regards

Mwende

Disclaimer: Views expressed here (except those quoted or referenced) are the author’s own