If your team would like to become part of the TI community: Your team needs to become "TI listed"! The process is simple enough and once you have secured your sponsors it will take 4 to 5 weeks to conclude a vote of the TI community and inform you about the outcome:

  1. find at least two TI accredited or TI certified teams that are willing to sponsor your team (check out the TI Directory)
  2. fill out the form and provide it with the needed PGP/GPG public keys to ti@trusted-introducer.org
  3. you will receive a reply in which the TI team acknowledges your request, with that comes the so-called appendix A
  4. sign the appendix A (for more details and background see the invitation package below under "materials")
  5. submit the signed appendix A to ti@trusted-introducer.org
  6. you will receive a unique link. This link opens a form that is used to collect and to submit all data required for gaining the TI listing candidate status

If your team would like to learn why it is good to become part of the TI community: There are a lot of different reasons to become listed! And no fees will be charged for listed teams, although registration fees for events might apply if charged for a particular event the team attends.

If your team would like to understand more about the process: Read on and have a look at the process!

Process flow for TI Listing

The Process for new Listing Candidates

The TI team encourages all applying teams to engage already TI Accredited teams to support their registration, as it is always easier for new teams, to have at least two sponsors at the time of the listing request.

After a team has applied for registration as summarized above the procedure is as follows:

  • The registration application is distributed inside the TI community.
  • Within three weeks the applying candidate team needs to have explicite support of at least two accredited teams or one TI Associate and one accredited team in total. [TI Associates MAY sponsor listing candidates but there MUST be at least one different team sponsoring the candidate in question with no connection to the TI Associate. TI Associates MUST NOT sponsor their own team.]
  • Additionally no objections must be raised within the TI community. Any member from the TI community, i.e. accredited team members, TI Associates, can object against a candidate. Objections will be handled with care - the TI team will negotiate the needed confidentiality with the objecter.
  • The TI team informs the accredited teams of the outcome of the application.
  • Rejected teams do have the right to re-apply right after they receive the outcome message, although we recommend to take some time to discuss with potential sponsoring teams any new registration application to be sure, the voting passed in favour of your team the next time.
  • After three or more consecutive rejections any new registration application will be automatically rejected without any voting.
  • If a automatically rejected team believes that the situation or circumstances (causing the rejection) has changed significantly, it might request a decision of the TF-CSIRT Steering Committee to allow a new registration application. It is important that the team explains what has changed and why it is likely that the team will be accepted this time.

Re-Listing every three years

To increase the default trust level within the TI Community, all "listed" teams that have not become "accredited" within three years after their initial registration or the last successful "re-listing" are required to be accepted for another three year period. Again this requires explicit support from members of this trusted community. If there is no support, the team will be removed and no longer shown as "listed". For the re-listing the same procedure as for the "listing" is used.

Process flow for TI Re-Listing

In addition, the procedures require any re-listing candidate to meet the following conditions:

  • having two people registered as team representatives -- two for resiliency, each of those must have a valid e-mail address and valid PGP/GPG key
  • valid team e-mail address and PGP/GPG key for the team
  • latest update or up-to-date notice of team information within the TI Directory not older than 12 months

The TI team encourages all listed teams to attend TF-CSIRT meetings to meet other teams and secure the on-going support of the community!

Related Materials

Useful materials for this process are:

For TI Accredited and Certified teams there is a short guide when and how to sponsor a new TI listing candidate on the "members only" web site!