3. What needs to be considered when establishing a National CSIRT?

There are various guides and best practices that African countries could reference in the foundation and the establishment of a CSIRT. These frameworks recommend the use of a phased approach for the establishment of a National CSIRT including the:

• ITU Cybersecurity Programme: CIRT Framework 
• ITU-T Recommendation X.1060: Framework for the creation and operation of a cyber defence centre
• European Union Agency for Cybersecurity (ENISA): How to set up a CSIRT and SOC
• GFCE Global Good Practice: National Computer Security Incident Response Teams (CSIRTs)

GFCE Cyber Incident Management in Low-Income Countries – Part 1- A Holistic View on CSIRT Development and Part 2- A Guideline for Development