In SIM3 we define “Baselines” as a well-defined set of minimum values for all or a subset of SIM3 Parameters, in a specific context. A Baseline can also have additional demands or instructions, independent from SIM3. A table containing all Baselines known to OCF so far is printed below.
The oldest Baseline is the TI Certification Baseline which dates from 2010. This is used for the purpose of TI Certifications and reCertifications (every 3 years). Only Accredited TF-CSIRT members can choose to apply for Certification – this is not mandatory. This Baseline has minimum SIM3 Level demands for 44 of the 45 Parameters in the SIM3 CSIRT Profile, but is successfully used for all types of Accredited teams (not just CSIRTs).
In 2019 the ENISA SIM3 Baselines Basic, Intermediate and Advanced emerged, inspired by the EU NIS Directive and developed by ENISA with support of OCF: for national and sectoral (n/s) teams in the EU. These were and are used by the EU’s CSIRTs Network. There are however compelling arguments to use these three Baselines for n/s teams all over the world, mostly because a national team from e.g. Peru or Vietnam does not essentially differ much from a similar team in e.g. Italy – and even several commercial teams have embraced these 3 Baselines. These membership Baselines have minimum SIM3 Level demands for all 45 Parameters in the SIM3 CSIRT Profile, and are used for any type of n/s CSIRT.
Note: ENISA has in 2024 devised a SIM3 Baseline called Expert that is stricter than Advanced maturity wise, as a result of the EU NIS2 Directive. At the same time, the original Baselines were updated. (There is no recommendation yet on the use of the Expert Baseline outside the EU, as this Baseline is more specifically linked to NIS2 than the original three.)
In 2023 FIRST and OCF together developed a limited Baseline to be used when becoming a member of FIRST. This membership Baseline has minimum SIM3 Level demands for 11 of the 45 Parameters in the SIM3 CSIRT Profile, and is used for any type of CSIRT, SOC, ISAC or PSIRT that have requested to join the FIRST as member team.
In 2024 the Organization of American States (OAS) with support of OCF developed the CSIRTAmericas Baseline. This membership Baseline has minimum SIM3 level demands for all 45 Parameters in the CSIRT profile, and is used for national and sectoral teams that have requested to join the OAS CSIRTamericas cooperation.. The OAS has published this Baseline in English and in Spanish.
All the above SIM3 Baselines are represented in the SIM3 Online Tool. Note that (since early 2026) there is an option “Baseline” right above on the tool window where you can select the visible Baselines. (This is to save space on the tool window.)
As OCF we aim to keep the number of Baselines relatively low, as a too high number would only lead to confusion. Especially the three ENISA Baselines Basic, Intermediate and Advanced are very suited for general use, wherever you are on the planet. If you think that in your organisation or collaboration you really have need of a separate SIM3 Baseline which is not covered by any existing one, please get in touch with us at OCF to discuss. Thank you!
Table of all SIM3 Baselines discussed above, with the minimum Level demand for all Parameters:
