(O7) CONTINUOUSLY EXCHANGE INFORMATION, KNOW-HOW AND EXPERIENCES WITH ITS CONSTITUENTS, ESTABLISH BEST SECURITY PRACTICES/GUIDELINES An important component in the functioning of the Centre is to provide staff that is technically capable to address all challenges when responding to computer incidents. We are witnessing the extensive and rapid development of information technology, and particularly the development and distribution of malware. In order to catch-up with this trend of rapid development of new computer threats are their increasingly complex structure, the education and advancement of the Centre's employees are of very high importance. The education and development of the employees will be through selfeducation by using educational materials available online, by attending specialized courses for CIRTs organized by international organizations (e.g. TRANSIT I, TRANSIT II ...), but also by exchange of experiences with the local, regional and international centres for computer incident response during workshops and seminars. It will continuously exchange information, know-how and experience with the constituents, define best security practices/guidelines and publish them accordingly. In this regard, MKD-CIRT will continuously provide education and training. Staff education aimed at gaining know-how and skills in the field of information security, information security management, management of computer security incidents, penetration testing, vulnerability detection and analysis, and forensics. The acquired know-how will be verified through certification of the employees in accordance with international certifications recognised by ENISA, ITU and EU, in the field of: • Information security management and management of security incident response, such as ISC2 CISSP (Certified Information Security Professional), ISACA CISM (Certified Information Security Manager), EC Council CCSO (Certified Chief Information Security Officer), EC Council CIH (Certified Incident Handler) • Forensics, penetration testing and encryption, such as the EC Council CES/CEH/CHFI (Certified Encryption Specialist/Certified Ethical Hacker/Computer Hacking Forensics Investigator) • Risk analysis and management, such as ISACA CRISC (Certified in Risk and Information System Control) 16