2020 Report on CSIRT-LE Cooperation: study of roles and synergies among selected countries

The purpose of this report is to further explore and support the cooperation between computer security incident response teams (CSIRTs), in particular national and governmental (n/g) CSIRTs, and law enforcement agencies (LEAs) and their interactions with the judiciary (prosecutors and judges). This report proposes a methodology to analyse the legal and organisational framework, the roles and duties of CSIRTs, LEAs and the judiciary, and their required competences, as well as synergies and potential interferences in their activities related to their responses to cyber incidents and fight against cyber-crime, respectively. In addition, this report aims to present a detailed analysis focusing on some Member States (MSs) and European Free Trade Association (EFTA) countries, namely Czechia, France, Germany, Luxembourg, Norway, Portugal, Romania and Sweden.