The first activity that OCF undertook in 2017 was the stewardship of the SIM3 maturity model for CSIRTs, that is not only used by the TF-CSIRT community for the sake of “Certification”, but also has been adopted by FIRST, the global Forum of Incident Response and Security Teams with 700+ members; by the NCA (Nippon CSIRT Association) that has over 200 members in Japan; by the OAS CSIRTAmericas and several other non-profit cooperations in this field; and by several commercial companies. OCF is the primary IPR holder for SIM3, thus institutionalising SIM3 and securing it for the future. OCF will continue their policy of allowing free use of SIM3 for not-for-profit and internal use, however OCF will continue to maintain and improve SIM3 together with the most important users of the model – which requires funding from various sources.
