State of the Practice of Computer Security Incident Response Teams ...

Table 6:
North American and European CSIRTs by Subcategory
Subcategory
North
America
Europe
Banking and Finance 8 4
Managed Security Service Provider 54 15 8
Commercial 12 5
Vendor 10 1
ISP 3 13
National 0 2
Research Network 1 28
Research Organization 2 2
University 12 9
Military 5 2
Government 8 8
Health 2 1
Individuals 4 1
Total 82 84
The following observations can be made about this data:
• Not surprisingly, most vendor teams are located in the U.S., or at least that is where their
development group and product security teams are located.
• While many more managed security service providers and commercial companies have a
team in North America, most of the ISP teams are in Europe.
• As previously stated, Europe is characterized by the many national research network
teams, but it is interesting that a similar number of universities in North America and
Europe have their own teams established.
54
These are sometimes called “managed service providers.”
44 CMU/SEI-2003-TR-001