Published in 1998 and never replaced, RFC 2350 describes an incident response team in seven parts. What it demands, what has aged, how to write one.
Compliance & Standards, Projects & Governance
RFC 2350: describing your CSIRT in seven parts
by •
Category: Compliance & Standards
A practical reading of the regulatory and normative frameworks of cybersecurity, grounded in concrete cases. NIS2, DORA, GDPR, ISO/IEC 27001 and 27701, PCI DSS, and the reference models specific to CERT and CSIRT teams: SIM3, FIRST, PRIS.
Compliance & Standards, Projects & Governance
SIM3 v2 interim: 45 parameters to raise your maturity
by •
SIM3 v2 interim measures a team over 45 parameters and 5 levels. Free for internal use, tooled online, and soon extended to SOCs and PSIRTs
Compliance & Standards
NIST IR 8597: Publication of Interagency Report on Cloud Token and Assertion Protection
by •
Executive Summary On December 22, 2024, the Cybersecurity and Infrastructure Security Agency (CISA) and the National Institute of Standards and Technology (NIST) published the initial draft of interagency report IR 8597 “Protecting Tokens and Assertions from Forgery, Theft, and Misuse”. This document is subject to public consultation until January 30, 2026, with comments submitted to…
Compliance & Standards
RFC 9794: Terminology for Post-Quantum Traditional Hybrid Schemes
by •
Executive Summary RFC 9794 establishes standardized terminology for hybrid cryptographic schemes that combine post-quantum and traditional algorithms. As organizations prepare for the quantum computing threat, this reference document ensures consistent communication across protocols, standards, and security teams. It defines key concepts including PQ/T hybrid schemes, composite constructions, security properties (hybrid confidentiality, hybrid authentication), and certificate…
