A Few Questions
What is the actual goal?
- To provide extended abuse contact for a network.
- To link CSIRT network with network objects in the RIPE Database.
Who are the consumers?
- An abused user.
- A NOC handling an incident.
Is it important for an IRT to be part of a consortium?
- What is the downside of not being a member?
- Which one? TF-CSIRT, FIRST, …?
What is the drawback of allowing any IRT to register themselves?
- Better than nothing. If a network trusts an IRT.
- It may obscure a member IRT that can handle an incident more efficiently.