2023-10-24T10:37:59-05:00 2022-12-31 582676261 Rogers & Company PLLC 8300 Boone Boulevard Suite 600 Vienna VA 22182 990 2022-01-01 383943584 Forum of Incident Response and Security Teams Inc FORU 9196546805 2500 Regency Parkway Cary NC 27518 Chris Gibson Executive Director 9196546805 2023-10-24 1 Chris Gibson XXX-XX-XXXX 1 Hemali Kane EA P01337292 7038930300 2023-10-18 2 AAL1 IAL1 2022 2023-04-26 12:10:37Z FIRST Chris Gibson 2500 Regency Parkway Cary NC 27518 3192168 0 X www.first.org X 2014 NC FIRST aspires to bring together incident response and security teams from every country across the world to ensure a safe internet for all. 10 10 1 65 0 0 1446243 1231231 147551 1960937 0 0 0 0 1593794 3192168 0 0 0 0 278823 611142 0 0 1499 1091008 2928415 1369831 3539557 223963 -347389 3169610 2687969 645686 516444 2523924 2171525 X FIRST aspires to bring together incident response and security teams from every country across the world to ensure a safe internet for all. Effective response is a global task, mirroring the global nature of the internet. Based on a peer to peer network governance model, computer security incident response teams (CSIRTS), product security incident response teams (PSIRTS) and independent security researchers work together to limit the damage of security incidents. This requires a high level of trust; the fuel our members run on. FIRST fosters trust building among member through a variety of activities. Incidents are not confined to one cultural or political corner of the internet, nor do they respect borders or boundaries. FIRST thus promotes inclusiveness, inviting membership from all geographic and cultural regions. 0 0 1848950 1951437 FIRST held its 34th annual conference in both Dublin, Ireland and virtually in June 2022. More than 6,420 security professionals from over 79 countries attended sessions on industry best practices, reviews of incident handling, and tools and training, and heard keynotes from industry recognized experts. 462323 FIRST provides several online services supporting members in handling security incidents more efficiently. This includes a website containing verified contact information, best practices, and much more information. Operational information is made available through electronic interfaces to be incorporated directly into members' tools. FIRST has over 681 member teams located in more than 106 countries. Member teams include large vendors, national certs, telcos, research institutes, and many more. FIRST Hosts International Standards like the common vulnerability scoring system (CVSS). 318215 9500 Besides the annual conference, FIRST and its members organize in-person events around the globe which typically have a regional or topical focus. These events cater to a more specialized or local audience. Community driven, these events help participants to force valuable connections which are invaluable during a security incident. Participants discuss security-related technical topics, tools as well as best practice. Many of the events co-host training courses in the area of incident response. In 2022, there were 10 in-person regional events, some with virtual participation. 2629488 1 1 0 0 0 0 0 0 0 0 1 0 0 0 0 1 0 0 0 1 1 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 5 0 1 1 1 0 0 0 0 0 1 0 0 0 0 0 0 0 X 10 10 0 0 0 0 1 1 1 1 0 0 0 1 1 1 1 1 1 1 0 0 NC X Chris Gibson 9196546805 2500 Regency Parkway Cary NC 27518 X Tracy Bills Chair 10.00 X X 0 0 0 Michael Hausding CFO 10.00 X X 0 0 0 Audrey Mnisi Mireku Director 10.00 X 0 0 0 Desiree Sacher-Boldewin Director 10.00 X 0 0 0 Mona Elisabeth Ostvang Director 10.00 X 0 0 0 Olivier Caleff Director 10.00 X 0 0 0 Serge Droz Director 10.00 X 0 0 0 Carlos Alvarez Director 10.00 X 0 0 0 Trey Darley Director 10.00 X 0 0 0 Yukako Uchida Director 10.00 X 0 0 0 Chris Gibson Executive Director 40.00 X 182616 0 38151 David Schwartzburg Director of IT and Security 40.00 X 115887 0 21295 298503 0 59446 2 0 1 0 Conference & Publication Service 2525 N Sheffield Avenue 2E Chicago IL 60614 Event Management 384216 Velocity Global 3858 Walnut Street Suite 101 Denver CO 80205 Salaries and Staffing 358843 Security Services LLC 45980 Center Oak Plaza Sterling VA 20166 Security Services 177021 3 1198831 32400 1231231 Conference revenue 900099 1297170 1297170 Sponsorship 900099 633267 633267 Symposia revenue 900099 21000 21000 Education programs 900099 9500 9500 1960937 3192168 1327670 0 633267 220767 141266 79501 379832 243050 136782 10543 6746 3797 98804 34896 63908 97020 97020 165101 152619 12482 64197 19048 45149 93249 71369 21880 320704 25254 295450 1078690 975672 103018 454560 449797 4763 14988 10492 2997 1499 Program management 384216 384216 Fellowships 69116 69116 All other expenses 50912 9089 41823 Materials development 26358 26358 10500 10500 3539557 2629488 908570 1499 2015980 1707314 20100 71444 1133170 909211 2151 2151 360 0 3169610 2687969 116111 151104 529575 365340 645686 516444 X 2387291 2034892 136633 136633 2523924 2171525 3169610 2687969 X -347389 -5010 X 1 X 0 0 0 X 1118146 984484 1167506 1446243 1231231 5947610 1236288 2112129 96324 147551 1960937 5553229 2354434 3096613 1263830 1593794 3192168 11500839 0 2321 2062 71267 75650 2321 2062 71267 75650 11425189 46500 201 4026 50727 2400934 3096814 1267856 1593794 3192168 11551566 0.98910 0.97110 0.00000 X RESTRICTED RESTRICTED RESTRICTED RESTRICTED RESTRICTED RESTRICTED RESTRICTED RESTRICTED 2151 2151 0 0 X Part X, Line 2: Management has evaluated FIRST's tax positions and concluded that FIRST's financial statements do not include any uncertain tax positions. Europe (Including Iceland & Greenland) 0 1 Program services Programs and General Admin Management 220767 East Asia and the Pacific 0 1 Program Services Programs and General Admin Management 82187 Europe (Including Iceland & Greenland) 0 0 Program Services Conferences 1526071 Middle East and North Africa 0 0 Program Services Membership Fees 0 2 0 0 0 2 1829025 0 1829025 0 0 0 0 0 1 Part I, line 3: Organization used GAAP to report expenditures on Schedule F. Part III Accounting Method: X X X 0 0 0 0 0 0 0 0 0 Chris Gibson Executive Director 169551 0 12669 0 396 0 5083 0 33068 0 220767 0 0 0 Form 990, Part V, Line 2a Line 2a includes one US employee issued a Form W-2. In addition, the organization has two employees located overseas, for a total of three employees. Form 990, Part VI, Section A, line 6 Full members are security incident response teams who assist a defined constituency in preventing and handling security-related incidents; liaison members: Individuals that have a legitimate interest in and value to FIRST. Form 990, Part VI, Section A, line 7a The members of the Forum of Incident Responses and Security Teams, Inc. annually hold an election where members of the Board of Directors are elected to the Board. Members vote for any changes to the bylaws or other governing documents of the Organization. Form 990, Part VI, Section A, line 7b Board of Directors meetings as well as the annual all group meeting are documented in meeting minutes by the Secretariat of the Organization. Form 990, Part VI, Section A, line 8b The organization does not have designated committees. The Board acts on behalf of the Organization. Form 990, Part VI, Section B, line 11b The tax return is reviewed by the CFO and presented to the Board of Directors for review. Form 990, Part VI, Section B, line 12c Each director, officer, and member of a committee with board-delegated powers shall annually sign a statement which affirms that they: A. Have received a copy of the conflicts of interest policy, B. Have read and understands the policy, and C. Have agreed to comply with the policy. If a conflicts arises the Board member will abstain from voting. Outside counsel attends the orientation Board meeting for new members to review the policuy and collect signed agreements. Form 990, Part VI, Section B, line 15a The former Chair and previous CFO reviewed online data regarding salaries of other Executive Director's as well as average payment for leaders in the field of cyber security. The Full Board was involved in the input. The discussions regarding the deliberation and decisions were published to all members. Form 990, Part VI, Section C, line 19 The Organization makes the governing documents, conflicts of interest policy, and financial statements available on its website. Form 990, Part V, Lines 2a/b, Part VII, Part IX Comp & Benefits Reporting FIRST contracts with Velocity Global as its professional employer organization (PEO). Velocity Global is the employer of record for tax, benefits, and insurance purposes for FIRST's employees. Form 990, Part XI, line 9: Foreign currency exchange loss -5,010.