Optimization of an Academic CSIRT: SIM3 as a starting point
Keywords:
CSIRT, SIM3, maturity models, incident management tools, process automationAbstract
This article presents CERTUNLP's experience and the achievements obtained in increasing the maturity level in each of the domains of the SIM3 model. This process began with the CSIRT evaluation in 2022 and involved identifying key areas for strengthening governance, the services provided, and the technical capacity of our team. Through the implementation of concrete strategies, such as the optimization of internal procedures, the development of tools, team training, and the adoption of best practices aligned with international standards, CERTUNLP managed to raise its level of preparedness and response to emerging threats. We currently have a new version of our incident management system with more features and a more efficient communication mechanism, in addition to integration with other tools that facilitate the delivery of our services. Sharing this journey can be useful for other incident response teams to chart their own roadmap for evolving their maturity level.
Downloads
Published
Issue
Section
License
Copyright (c) 2025 Francisco Javier Díaz, Paula Venosa, Mateo Durante, Mar´ıa Agustina Echaniz, Ulises Cabrera, Agustín Paturlanne, Jeremías Pretto
This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.
Acorde a estos términos, el material se puede compartir (copiar y redistribuir en cualquier medio o formato) y adaptar (remezclar, transformar y crear a partir del material otra obra), siempre que a) se cite la autoría y la fuente original de su publicación (revista y URL de la obra), b) no se use para fines comerciales y c) se mantengan los mismos términos de la licencia.
