Security Incident Management Maturity Model (SIM3) supports the measurement of maturity of incident response or a security team based on four areas: organisation, human issues, tools, and processes. SIM3 is freely available from the not-for-profit Open CSIRT Foundation (OCF). The model is used for self-assessment of teams and supports the TI Certification scheme under the TF-CSIRT and is considered by FIRST for membership.