Training material to enhance cooperation across CSIRTs and Law Enforcement

Back to News

In an effort to further enhance the cooperation between CSIRTs and law enforcement (LE), and their interaction with the judiciary, ENISA has developed some additional training material addressing the cooperation across these communities.

This training material focuses on the following four thematic areas of the CSIRTs and LE cooperation:

  1. Behavioural aspects, in particular the different approaches to problems, modi operandi,  mentalities and ‘languages’ of the different communities;
  2. Legal and organisational aspects, among other the challenges related to the diversity of legal systems and legal provisions of the Member States;
  3. Technical aspects, including ongoing efforts towards a broader adoption and use of a common taxonomy and common tools;
  4. Cooperation across CSIRTs, LE and the judiciary, covering areas such as data retention, sharing of personal data (including IP addresses) and confidentiality of criminal investigations as well as admissibility of digital evidence.

For each of the above-mentioned areas, a handbook (documents for the trainer) and a toolset (document for the trainees) have been prepared and published.


Access the ENISA's Training Material on Cooperation across CSIRTs and Law Enforcement 


The intended target audience are CSIRTs (mainly national and governmental CSIRTs but not limited to them), LE, possibly the judiciary (prosecutors and judges) as well as individuals and organisations with an interest in Cybersecurity.  

Furhter Information:

For more information on these reports, please contact: CSIRT-LE-cooperation@enisa.europa.eu

More on ENISA’s activities in the area of CSIRTs and communities

For Interviews please contact press@enisa.europa.eu