State of the Practice of Computer Security Incident Response Teams ...

2.3.5 Initiatives in Latin America
Since the late 1990s and early 2000s, more CSIRTs have been developed in Latin America.
Although many teams exist, currently only five teams are FIRST members [FIRST 03]:
• APSIRT – AT&T Latin America - Peru Security Incident Response Team. 30 According to
its FIRST Team member information, APSIRT’s constituency is “customers of AT&T
Latin America - Peru Internet access services.”
• CAIS – Brazilian Research Network CSIRT. 31 According to its FIRST Team member information,
CAIS/RNP’s constituency is “Brazilian academics and research institutions.”
It has been a FIRST member since September, 2001.
• CLCERT – Chilean Computer Emergency Response Team. 32 According to its FIRST
Team member information, CLCERT’s constituency is “users and organizations operating
under the .cl domain and users and organizations of computer systems operating in
Chile.”
• NBSO – NIC BR Security Office - Brazilian Computer Emergency Response Team. 33
According to its FIRST Team member information, NBSO’s constituency is “Brazil -
Internet .br domain and IP addresses assigned to Brazil.”
• UNAM-CERT – the CSIRT for the National Autonomous University of Mexico. UNAM-
CERT has been a FIRST member since 2001. 34
A previous CSIRT that was established in Mexico as an initiative from the Instituto Tecnológico
y de Estudios Superiores (ITESM) was Mx-CERT, the Mexican Computer Emergency
Response Team. This CSIRT was a member of FIRST and hosted the initial FIRST
conference held in Latin America, in 1998 in Monterrey, Mexico [FIRST 03]. Mx-CERT is
no longer operational.
Many more CSIRTs exist in Latin America besides those that are FIRST members. It is difficult
to know the total number, as there is currently no method of identifying and verifying
teams. There are various initiatives in different organizations to begin to collect security contact
and CSIRT information for Latin American countries. There is no formal regional initiative
in Latin America as there is in Europe or the Asia Pacific, such as the TF-CISRT, eC-
SIRT, and APCERT initiatives. However, in many Latin American countries, established
CSIRTs have efforts underway to help other teams get started. Other Latin American gov-
30
31
32
33
34
For more information on APSIRT, see .
For more information on CAIS/RNP, see .
For more information on CLCERT, see .
For more information on NBSO, see .
For more information on UNAM-CERT, see .
30 CMU/SEI-2003-TR-001