SIM3

SIM3 – Security Incident Management Maturity Model

SIM3 is a model used as an indication of  CSIRT Maturity.
It is maintained by Open CSIRT Foundation.

There is a self assessment tool here: SIM3 v2 interim Self Assessment Tool.

A lot of the work a CERT/CSIRT needs to do, to achieve some level of maturity, is about documentation. Team Wilk have created a quick tool in form of an Excel-file that keep tracks what documentation needed, where it is and the status of each document. You find it here: SIM3_v2_Documentation_list

Questions? Comments? Any feedback at all? Please let us know: Contact us.