TrustBroker Africa (TBA) II: CSIRT training and community-building workshop

28 Nov 2022, 09:00 → 2 Dec 2022, 17:30 Africa/Gaborone

BOCRA

Emmanuel Thekiso (BwCIRT), Nick Small (Cyber4dev), Don Stikvoort (Open CSIRT Foundation), Omo Oaiya (WACREN)

TrustBroker Africa (TBA) II is a computer security incident response team (CSIRT)  training workshop and community-building event organized by WACREN in collaboration with the Open CSIRT Foundation and Cyber4Dev with the support of the AfricaConnect3 project.

Hosts:  Botswana Communications Regulatory Authority (BOCRA) and BwCIRT, the Computer Incident Response Team for Botswana

The training is based on the well-known TRANSITS I courses for new or prospective CSIRT staff and related roles such as communications and legal or managers who need to understand these activities.  It will include a technical intro module ((attack vectors and such) with underground economy aspects.

Targeted Audience:  NRENs, national CSIRTs and non-commercial security-related organisations.

Requirements: Hands-on exercises. No laptop is required. 

Logistics:

• All participants will have to secure funds for their travel, including visa fees, where applicable.
• International participants from NRENs will be provided accommodation and welfare from 28 November to 2 December 2022.
• Lunches and coffee breaks will be provided for all participants during the workshop.

Applications from all three regional research networks - ASREN, UbuntuNet Alliance and WACREN are welcome and encouraged.

The deadline for application is 28 October 2022

Monday, 28 November

1 CSIRT Essentials Training - Introductions

Based on TRANSITS I

2 Initial roleplay exercise (also serving as icebreaker)

10:30 CSIRT Organisation & Maturity (i)

3 Lunch Break

14:00 CSIRT Organisation & Maturity (ii)

4 What about the Law ?

Tuesday, 29 November

5 CSIRT Operations (i)

13:00 Lunch Break

6 CSIRT Operations (ii)

7 How to keep things confidential ?

Wednesday, 30 November

8 CSIRT Crime Scene

10:30 Health & Networking Break

9 Key-signing Party!

13:00 Lunch & Networking

10 Incident Management cooperation inside your country, continent and worldwide

Incident Management cooperation inside your country, continent and worldwide

1. Trust building and outreach – the most important factors in the success of your team.
2. CSIRT multi-stakeholder approach inside your country
3. TrustBroker Africa and other stakeholders (AfriNIC, AfricaCERT, SADC, AU et al.)
4. EU approach
5. FIRST and other global stakeholders (GFCE, UN et al.)

16:30 Certificate ceremony and closure

11 Dinner / social event

Thursday, 1 December

12 Trainer Coaching - Introductions

1. Learning & teaching strategies - how to cater for all types of students
2. Training methods - how to make sure your audience stays with you

13:00 Lunch

13 Trainer coaching - Being a Trainer

1. How to be a trainer - from motivation & communication to "what it takes to be a trainer"
2. Preparation for trainings - from first planning all the way to the half hour before training start

Friday, 2 December

14 Training coaching - Execution of trainings

1. Execution of trainings - trainer state, rapport, group dynamics, handling of individuals ... and much more

2. Closing of trainings - testing, ordeals, evaluation, ...

13:00 Lunch Break

15 Training coaching - Exercise, Feedback, Next steps & Closure