1 PLANNING Interviews with stakeholders Once the list of the stakeholders, roles and subgroups is prepared, there will be meetings with each of the subgroups as a way to approach them and better understand their needs, what they expect from the national CSIRT, and generally where they stand in terms of cyber security. Meeting each subgroup individually provides a rich environment for exchange of opinions and allows for transparency during the creation process. During these interviews, it is important to introduce the stakeholders to the subject of CSIRTs, since many of them may not have experience in the subject, especially depending on the audience and general level of cyber security development within a country and government. The CSIRT project manager and team should prepare questions to help stakeholders elaborate their position, such as: After holding discussion sessions, the project team could circulate a questionnaire, allowing stakeholders to contribute thoughts privately. Meeting each subgroup individually provides a rich environment for exchange of opinions and allows for transparency during the creation process. Information would be analyzed following discussions and the collection of surveys, allowing the project team to create a more robust and clear stakeholder map. This entire process could be repeated to ensure that all stakeholders are engaged and the map of roles and responsibilities of collaborating institutions is complete and precise. • Do you feel there is a need to create a National CSIRT? Why or why not? • What should the role of a National CSIRT be? • What services should a National CSIRT provide? • Is there any particular part of government where the National CSIRT should be located? • How would a National CSIRT potentially benefit your organization? • How might working with a National CSIRT be difficult for your organization? Would the relationship be governed by a contract, NDA, SLA, or some other means? • Is your organization willing to actively cooperate with a National CSIRT? What are the limits to cooperation? • What other organizations or individuals do you think should be involved? 24 A B C D Definition 25