TI Process

Accreditation

	Summary  Registration  Accreditation

 
The Trusted Introducer (TI) is the trust network for CSIRTs or CERTs in Europe.

The logical next step for your CSIRT after registration ("listing") is accreditation. Accreditation is performed by the TI following a standardised process which requires between one and four months, depending on your own feedback. Any registered CSIRT that is serious about their service can gain accreditation. A one-time accreditation fee and an annual fee ensure the continuity of the TI trust network. The accredited teams have access to a trusted website, regular closed meetings, secure mailing lists and other value added services.

To apply for accreditation of your CSIRT, follow these steps:

1. Make sure your team is "listed". Check if you are registered here. If not, apply for registration first. Your team must be "listed" before it can apply for accreditation.
2. To apply for accreditation, all you need to do is send a simple request to the TI by e-mail.
3. The TI will get back to you for confirmation and possibly additional questions.
4. Next, you will receive a formal "invitation package" for accreditation. This contains all the materials you need to prepare yourself to successfully complete the process.
5. Once you are ready to embark on the accreditation, you fill out Appendix C from the invitation package, sign it, and send it by fax and postal mail to the TI as specified within 4 weeks of receiving the invitation package.
6. When the TI has verified your faxed Appendix C, the status of your team will change from "listed" into "accreditation candidate" and you will be notified. At that point (but usually later!) you will receive the invoice for the one-time "accreditation candidate" fee of EUR 900 .
7. Following that status change, you have up to two months to meet the accreditation requirements (as per appendix D) and send in the filled-out forms (appendices B and D). Although the invitation package is complete and authoritative, you may like to have a sneak preview of the essential elements:
   • Appendices A-D of the Invitation Package (accreditation requirements and forms)
   • CSIRT Code of Practice (recommended to follow - not an obligation)
   • RFC-2350 (recommended to use - not an obligation)
8. The TI will verify and assess all the materials you send in, and answer any questions you may have concerning process and accreditation. In interaction with you, the TI may ask additional questions, and may offer advice to help you meet the requirements. This process takes one to four weeks on average, depending on the nature of the interactions. Please be advised that the accreditation must be finalised within three months after becoming "accreditation candidate" - or the accreditation expires.
9. If at any stage in the above process you do not meet the requirements or miss a deadline, your invitation and accreditation process will expire immediately. You can then ask to be re-invited - but beware, as you can only be invited twice within any given period of one year.
10. Once the TI is confident that your CSIRT has met all requirements, the status of your team is changed to "accredited". You are formally notified thereof and gain access to the closed TI website and other services only for accredited teams. At that point or later in time you will receive the invoice for the annual accreditation fee of EUR 1056 .