FIRST CSIRT Services Framework and Standards FIRST-CSIRTF-SA5-KnowledgeTransfer: Service Area 5 - Knowledge Transfer (Awareness, Training, Exercises, Advisory)

FIRST CSIRT Services Framework v2.1 Service Area 5 - Knowledge Transfer. SCOPE: building cybersecurity capacity in the constituency + the broader community through awareness + training + exercises + advisory. SUB-SERVICES: (1) AWARENESS BUILDING - phishing simulations + security awareness training + role-specific training + insider risk + supply chain awareness + executive briefings; (2) TRAINING + EDUCATION - technical training for analysts + responders + administrators + developers + with hands-on labs + certifications (FIRST TRANSITS + SANS GIAC + SEI Software Engineering Institute courses); (3) EXERCISES + DRILLS - tabletop exercises + functional exercises + full-scale exercises + red-team / blue-team / purple-team exercises + national + international cyber exercises (e.g. Cyber Storm + Locked Shields + Cyber Europe); (4) TECHNICAL + POLICY ADVISORY - guidance documents + advisories + policy input + RFCs + standards-development contributions to FIRST + ISO + NIST + ENISA + national authorities.