1 PLANNING Organizational Structure As mentioned above, the initial services recommended for a National CSIRT are incident management, vulnerability management, system monitoring, alert publishing and training. Management Operations IT R&D Support Services The following diagram illustrates the minimal initial structure recommended for a National CSIRT, which can grow over time as needed. Several CSIRTs in the Americas, like those from Panama, Paraguay and Uruguay, began with organizational structures similar to this and have shown significant growth. 50 A B C D Organization and HR Support Services: Marketing. Communications. Legal Support. Press Management. Administration & Finance 51