3 CLOSURE Formal Closure occurs when all the information generated in the CSIRT establishment process, including its completeness, is analyzed and verified. After the closure process is complete, the National CSIRT will be formally established. Upon closing the establishment process, the CSIRT Project Manager will have: • A list of stakeholders • Statements of establishment of the CSIRT (Mission, Vision, services, etc.) • Legal documents for the creation of CSIRT • Physical facilities, leases, etc. • Hired and trained human resources • Operations Manual with policies and procedures • Technological infrastructure and respective support contracts In addition, other documents are drafted during the establishment phase, including definition of scope, timeline and budget. The project team should be convened for a debriefing session to discuss lessons learned and where the process might be improved upon. Finally, with all the information generated, it is essential to make a closing report containing: • • • • • The overall objective of the project Activities performed Performance of the project (scope, timeline, budget) Lessons learned Future Recommendations This report will be attached to the project documentation and it will give formal closure to the project. Formal Completion of Activities During planning, the Project Team establishes clear steps to be completed during project implementation. Each of these has a clear indicator of completion, such as “Trained Human Resources.” To record the activity as formally completed, the project team must verify that all necessary staff received the training and then collect appropriate documentation. Similarly, all contracts and service agreements must be verified and have legal approval and necessary documentation. Finally, the closing report should be approved by the project sponsor in order to complete the implementation phase of the CSIRT. 84 85