Setting up a CSIRT - ENISA helps CSIRTs on their way to a higher standard of maturity and advanced capabilities.
![](https://www.enisa.europa.eu/topics/incident-response/csirt-capabilities/@@images/f7ea5385-d303-4978-ae06-d73557a09f07.png)
CSIRT Maturity
ENISA provides recommendations to CSIRTS on how to improve, become more mature and be better prepared to protect their constituencies.
CSIRT maturity framework
The ENISA CSIRT Maturity Framework is based on the Security Incident Management Maturity Model (SIM3) which is a community driven effort to measure the maturity of CSIRTs. The ENISA CSIRT Maturity framework takes into account the requirements of relevant EU policies (e.g. NISD). The framework consists of a three-tier approach to CSIRT capabilities across Organisational, Human and Tools and Processes parameters. All parameters are evaluated in order to determine the level of maturity (Basic, Intermediate or Advanced).