1 PLANNING Target Community Scope C The CSIRT target community is the group of persons or entities that will receive services from the team; in other words, they are the clients. Once the CSIRT’s mission, vision and institutional and legal frameworks are established, it is important to define its scope, specifically by determining what services will be provided and to whom. The scope will be determined by the needs of human resources, technical training, infrastructure, tools and budget. Input Tools - Statement of establishment - Mission - Vision 38 A B C D Definition - Analysis of service requirements - Expert Consultations - Resource Analysis Output The CSIRT must clearly define what its target audience is, including whether or not different members of the community will receive different levels of service. This may vary depending on whether the criticality of the systems or infrastructures is managed and operated by a particular member of the community, or an existing CSIRT already serves a given entity. For example, military institutions often oversee their own networks and may not require the services of a national CSIRT. It is therefore crucial that a CSIRT determine whom it works for, what other teams are involved, and to what extent it serves the community. The target community may include other CSIRTs, ISPs, datacenter operators, and other actors whose trust and cooperation will be crucial for successful cooperation. BANK - Target Community - Definition of Services 39