SIM3 Certified Auditor training

From 28 – 30 September 2021, the Open CSIRT Foundation (OCF) will organise the next 3-day training to become a Certified SIM3 Auditor – we plan to do this live in The Netherlands and Poland at the same time, a new kind of double-located training to enable as many students as possible to join, adapting to challenging times. See below for details.

The OCF shepherds the further development of the SIM3 maturity model, that is used by TF-CSIRT/TI, by ENISA for national teams in the EU, by the NCA (Nippon CSIRT Association) in Japan, by FIRST for their new membership applications, and by the Global Forum on Cyber Expertise (GFCE) for their GCMF – the Global CSIRT Maturity Framework.

Certified Auditors play an important role in making it possible that SIM3 is used in a professional and objective way, and also contribute to further improving SIM3 in the near future.

Trainer: Don Stikvoort MSc (original author of SIM3) and Miroslaw Maj
Co-trainers: Olivier Caleff, Seiichi Komura (tentative) and Yoshiki Sugiura (tentative)
Location: Close to Amsterdam, The Netherlands – and Warsaw, Poland.
Schedule: 28 – 30 Sep 2021 every day from 09:30-16:30.
Pre-requisites: applicants need to have demonstrable knowledge *and* at least 3 years experience in cyber security incident management (“CSIRT work”); they also need to have inside experience in the CSIRT community (e.g. via FIRST membership, or transnational cooperations), in order to be eligible to participate.
Fee: € 1895, VAT (Dutch or Polish) included*. The fee includes** 3 hotel nights (27 – 29 Sep), 3 breakfasts and 3 lunches, 2 dinners (28 and 29 Sep) and (during the training) tea/coffee/water/cookies.

The fee also includes the right to take the auditor’s certification exam at the end of the training — providing you have enough experience in the CSIRT field, and providing you pay attention during the training, you will normally speaking be able to pass that exam. Passing the exam is however not part of the fee, this is your own responsibility (any special needs, please bring to our attention timely). We do exercise due care: see the ‘auditor certification clause’ below.

  • Cancellation clause: cancellation for the training is possible without charge no later than 2 months before the training starts. If cancellation takes place after that but no later than 1 month before the training starts, 50% of the full amount will be due. In case of a cancellation after that, or a no-show, 100% of the full amount will be due. In clear cases of absence due to “Act of God” the payment obligation remains, but OCF will seek to provide due care, e.g. offering access to the next training at only marginal cost.
  • Auditor certification clause: OCF will provide due care to prepare the trainees for the auditor’s certification exam at the end of each training. Following successful certification, the first year of being certified will be at zero cost. However if (1) a trainee is absent during parts of the training (unless after explicit consent of the OCF head trainer), or (2) fails or misses the exam on the 3rd day, certification will not take place, nor will any re-fund. In the case of failed exams only, OCF will allow a time-slot of 6 months in which, at no additional cost, the trainee will receive a task to fill any knowledge/experience gaps, and after successful completion of that task, will get a verbal repeat exam (this can be done via videoconferencing) – and providing this is completed successfully, certification will then take place. (In case of repeated failure, OCF has no more obligations towards the trainee and/or the organisation who paid for their participation.)

* Inside the EU (with some few exceptions), organisations/companies with an ‘EU valid’ VAT number pay 0% VAT, meaning their fee is 21% (NL) or 23% lower (PL). We regard a VAT number only then as ‘EU valid’ when it successfully passes the EC’s ‘VIES VAT number validation’, see
** Due to the nature of our contract with the training hotels, it is in principle not possible to deviate from this package deal. In very special cases, like for ‘locals’, please consult us well in advance.