TrustBroker Africa (TBA) II: CSIRT training and community-building workshop



CIRT Office, Spectrum House, Phakalane
Emmanuel Thekiso (BwCIRT), Nick Small (Cyber4dev), Don Stikvoort (Open CSIRT Foundation), Omo Oaiya (WACREN)

TrustBroker Africa (TBA) II is a computer security incident response team (CSIRT)  training workshop and community-building event organized by WACREN in collaboration with the Open CSIRT Foundation and Cyber4Dev with the support of the AfricaConnect3 project.

Hosts:  Botswana Communications Regulatory Authority (BOCRA) and BwCIRT, the Computer Incident Response Team for Botswana

The training is based on the well-known TRANSITS I courses for new or prospective CSIRT staff and related roles such as communications and legal or managers who need to understand these activities.  It will include a technical intro module ((attack vectors and such) with underground economy aspects.

Targeted Audience:  NRENs, national CSIRTs and non-commercial security-related organisations.

Requirements: Hands-on exercises. No laptop is required. 


  • All participants will have to secure funds for their travel, including visa fees, where applicable.
  • International participants from NRENs will be provided accommodation and welfare from 28 November to 2 December 2022.
  • Lunches and coffee breaks will be provided for all participants during the workshop.

Applications from all three regional research networks - ASREN, UbuntuNet Alliance and WACREN are welcome and encouraged.

The deadline for application is 28 October 2022

TrustBroker Africa
    • 9:00 AM 9:30 AM
      CSIRT Essentials Training - Introductions 30m

      Based on TRANSITS I

    • 9:30 AM 10:30 AM
      Initial roleplay exercise (also serving as icebreaker) 1h
    • 10:30 AM 12:30 PM
      CSIRT Organisation & Maturity (i) 2h
    • 1:00 PM 2:00 PM
      Lunch Break 1h
    • 2:00 PM 4:30 PM
      CSIRT Organisation & Maturity (ii) 2h 30m
    • 4:30 PM 5:30 PM
      What about the Law ? 1h
    • 9:00 AM 1:00 PM
      CSIRT Operations (i) 4h
    • 1:00 PM 2:00 PM
      Lunch Break 1h
    • 2:00 PM 4:30 PM
      CSIRT Operations (ii) 2h 30m
    • 4:30 PM 5:30 PM
      How to keep things confidential ? 1h
    • 9:00 AM 12:30 PM
      CSIRT Crime Scene 3h 30m
    • 10:30 AM 11:00 AM
      Health & Networking Break 30m
    • 12:30 PM 1:00 PM
      Key-signing Party! 30m
    • 1:00 PM 2:00 PM
      Lunch & Networking 1h
    • 2:00 PM 5:30 PM
      Incident Management cooperation inside your country, continent and worldwide 3h 30m

      Incident Management cooperation inside your country, continent and worldwide

      1. Trust building and outreach – the most important factors in the success of your team.
      2. CSIRT multi-stakeholder approach inside your country
      3. TrustBroker Africa and other stakeholders (AfriNIC, AfricaCERT, SADC, AU et al.)
      4. EU approach
      5. FIRST and other global stakeholders (GFCE, UN et al.)
    • 4:30 PM 5:30 PM
      Certificate ceremony and closure 1h
    • 7:00 PM 9:00 PM
      Dinner / social event 2h TBD


    • 9:00 AM 1:00 PM
      Trainer Coaching - Introductions 4h
      1. Learning & teaching strategies - how to cater for all types of students
      2. Training methods - how to make sure your audience stays with you
    • 1:00 PM 2:00 PM
      Lunch 1h
    • 2:00 PM 5:30 PM
      Trainer coaching - Being a Trainer 3h 30m
      1. How to be a trainer - from motivation & communication to "what it takes to be a trainer"
      2. Preparation for trainings - from first planning all the way to the half hour before training start
    • 9:00 AM 1:00 PM
      Training coaching - Execution of trainings 4h
      1. Execution of trainings - trainer state, rapport, group dynamics, handling of individuals ... and much more

      2. Closing of trainings - testing, ordeals, evaluation, ...

    • 1:00 PM 2:00 PM
      Lunch Break 1h
    • 2:00 PM 5:30 PM
      Training coaching - Exercise, Feedback, Next steps & Closure 3h 30m