SIM3 and references

CSIRT Maturity is an indication of how well a team governs, documents, performs and measures their function. The maturity of a CSIRT is measured with the Security Incident Management Maturity Model, also called SIM3.

OCF LOGO

For the current reference version of the SIM3 model see: SIM3 model
This version is in use with TF-CSIRT/TI for the (optional) Certification of their members, with ENISA for the sake of the maturity development of the EU national CSIRTs, and with the Nippon CSIRT Association (NCA).

Developments have started that will lead to SIM3v2, the next version of SIM3. This is expected to be released in the course of 2019. If you want to contribute to this development, please contact us.