1 PLANNING Document of Establishment Establishment B After identifying stakeholders, the project team should generate the necessary documentation to establish the National CSIRT. In this section, a document of establishment of the National CSIRT will be created, which will define its Mission and Vision; Institutional Framework; and Legal Framework Input Tools - Project Team - Document of stakeholders 28 A B C D Definition - Moderated working tables - Expert Consultation Output - Document of Establishment - Mission and Vision - Institutional Framework - Legal Framework To create a CSIRT it is necessary to define the framework that will guide and govern how the team will operate. Among other things, the establishment document or framework will cover: 7 • The nature and goals of the CSIRT • Target community (government, private sector, or both) A National CSIRT must clearly identify its mission and vision. These two aspects will not only guide those who work on the team, but will also serve as a guide and reference to anyone who receives its services or collaborates with it. In short, mission and purpose are the reasons why the CSIRT exists. A CSIRT’s institutional framework will establish its configuration. A CSIRT can be constituted as an independent enterprise to provide services in the private context; as a unit within a public or private organization to deliver internal or external services; or it may be an organization unto itself that does not report to any particular group or body. This guide will focus on an organizational structure for a National CSIRT. Finally, a legal framework will likely be necessary to protect the CSIRT and its operations, considering that a response team with national-level responsibilities will deal with many sensitive issues, possibly with implications on national security, the macro economy, or public safety. This guide will present and analyze the pros and cons of several types of legal frameworks for a National CSIRT. 29