2025-07-24T10:45:35-05:00 2024-12-31 582676261 Rogers & Company PLLC 8300 Boone Boulevard Suite 600 Vienna VA 22182 990 2024-01-01 383943584 Forum of Incident Response and Security Teams Inc FORU 9196546805 2500 Regency Parkway Cary NC 27518 Chris Gibson Executive Director 9196546805 2025-07-24 1 1 Amanda E Waterhouse P02014004 7038930300 2025-07-24 2024 2025-03-06 01:10:19Z FIRST Chris Gibson 2500 Regency Parkway Cary NC 27518 5738015 0 X www.first.org X 2014 NC FIRST aspires to bring together incident response and security teams from every country across the world to ensure a safe internet for all. 10 10 1 65 0 0 1577430 2274475 1667847 3435694 0 24170 0 3676 3245277 5738015 0 0 0 0 634691 866846 0 0 0 3099225 3752494 3733916 4619340 -488639 1118675 2492981 4032449 799510 1173369 1693471 2859080 X FIRST aspires to bring together incident response and security teams from every country across the world to ensure a safe internet for all. Effective response is a global task, mirroring the global nature of the internet. Based on a peer to peer network governance model, computer security incident response teams (CSIRTS), product security incident response teams (PSIRTS) and independent security researchers work together to limit the damage of security incidents. This requires a high level of trust; the fuel our members run on. FIRST fosters trust building among member through a variety of activities. Incidents are not confined to one cultural or political corner of the internet, nor do they respect borders or boundaries. FIRST thus promotes inclusiveness, inviting membership from all geographic and cultural regions. 0 0 2673531 1966521 FIRST held its 36th annual conference in Fukuoka, Japan with a virtual option in June 2024. More than 1055 security professionals from over 103 nations attended sessions on industry best practices, reviews of incident handling, and tools and training, and heard keynotes from industry recognized experts. 897517 295880 Besides the annual conference, FIRST and its members organize in-person events around the globe which typically have a regional or topical focus. These events cater to a more specialized or local audience. Community driven, these events help participants to force valuable connections which are invaluable during a security incident. Participants discuss security-related technical topics, tools as well as best practice. Many of the events co-host training courses in the area of incident response. In 2024, there were 8 in-person regional events, some with virtual participation. 280754 FIRST provides several online services supporting members in handling security incidents more efficiently. This includes a website containing verified contact information, best practices, and much more information. Operational information is made available through electronic interfaces to be incorporated directly into members' tools. FIRST has over 746 member teams located in 111 countries. Member teams include large vendors, national certs, telcos, research institutes, and many more. FIRST Hosts International Standards like the common vulnerability scoring system (CVSS). 3851802 1 1 0 0 0 0 0 0 0 0 1 0 0 1 0 1 1 0 0 1 1 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 7 0 1 1 1 0 0 0 0 0 0 0 0 0 0 0 0 X 10 10 0 0 1 0 1 1 1 1 0 0 0 1 1 1 1 1 1 1 0 0 NC X Chris Gibson 9196546805 2500 Regency Parkway Cary NC 27518 X Tracy Bills Chair 10.00 X X 0 0 0 Michael Hausding CFO 10.00 X X 0 0 0 Audrey Mnisi Mireku Director 10.00 X 0 0 0 Carlos Leonardo Director 10.00 X 0 0 0 Mona Elisabeth Ostvang Director 10.00 X 0 0 0 Olivier Caleff Director 10.00 X 0 0 0 Serge Droz Director 10.00 X 0 0 0 Nadia Yousef Director 10.00 X 0 0 0 Yukako Uchida Director 10.00 X 0 0 0 Carlos Alvarez Director 10.00 X 0 0 0 Chris Gibson Executive Director 40.00 X 195399 0 42516 David Schwartsburg Dir - IT and Security 40.00 X 158931 0 20565 Klee Christopher Aiken Dir - Community & Capacity Bldg 40.00 X 124166 0 1257 478496 0 64338 3 0 1 0 Velocity Global 3858 Walnut Street Suite 101 Denver CO 80205 Salaries and Staffing 671564 Conference & Publication Service 2525 N Sheffield Avenue 2E Chicago IL 60614 Event Management 492174 Capile Technodesign EPP Rua Barao 1267 Praca Seca Rio de Janeiro BR 21321-624 Tech Services 208621 Vercara 45980 Center Oak Plaza Sterling VA 20166 Security Services 168302 CliftonLarsonAllen LLP 1966 Greenspring Drive Suite 300 Timonium MD 21093 Accounting Services 124938 6 2056874 217601 2274475 Conference revenue 900099 1962845 1962845 Sponsorship 900099 1176969 1176969 Education programs 900099 295880 295880 3435694 24170 24170 Credit card rewards 459900 3676 3676 3676 5738015 2262401 0 1201139 237915 184559 53356 549438 426218 123220 7381 5726 1655 60532 46957 13575 11580 8983 2597 93180 33893 59287 137482 137482 168304 167820 484 113755 113755 295302 243268 52034 467714 299734 167980 505730 401271 104459 1362948 1362948 10909 10909 Program management 456632 416132 40500 Entertainment and meals 75381 75381 Materials development 65157 65157 4619340 3851802 767538 0 1001461 681523 0 1524170 111613 95968 864843 235095 2151 2151 0 0 515064 1139243 0 356450 2492981 4032449 106600 162008 692910 1011361 799510 1173369 X 1536838 2712447 156633 146633 1693471 2859080 2492981 4032449 X 1118675 48231 -1297 X 0 1 X 1 0 X 1167506 1446243 1231231 1577430 2274475 7696885 96324 147551 1960937 1338073 3439370 6982255 329774 329774 1263830 1593794 3192168 3245277 5713845 15008914 0 2321 2062 71267 6547 9320 91517 2321 2062 71267 6547 9320 91517 14917397 24170 24170 24170 24170 4026 4026 1267856 1593794 3192168 3245277 5738015 15037110 0.99200 0.99300 0.00160 X RESTRICTED RESTRICTED RESTRICTED RESTRICTED RESTRICTED RESTRICTED RESTRICTED RESTRICTED 2151 2151 0 0 Beneficial ownership in 3rd party funds 356450 356450 X 5784949 48231 -1297 46934 5738015 0 5738015 4619340 0 4619340 0 4619340 Part X, Line 2: Management has evaluated FIRST's tax positions and concluded that FIRST's financial statements do not include any uncertain tax positions. Part XI, Line 2d - Other Adjustments: Foreign currency exchange loss -1,297. Europe (Including Iceland & Greenland) Program Services Conferences 259357 East Asia and the Pacific Program Services Conferences 1745384 Europe (Including Iceland & Greenland) 0 1 Staffing 237915 East Asia and the Pacific 0 2 Staffing 136914 Sub-Saharan Africa 0 2 Staffing 126457 East Asia and the Pacific Membership Dues Europe (Including Iceland & Greenland) Membership Dues Middle East and North Africa Membership Dues North America Membership Dues Russia and Neighboring States Membership Dues South America Membership Dues South Asia Membership Dues Sub-Saharan Africa Membership Dues 0 5 0 0 0 5 2506027 0 2506027 0 0 0 0 0 1 Part I, line 3: The organization uses GAAP to account for activities in foreign regions. X X X 0 0 0 0 0 0 0 0 0 Chris Gibson Executive Director 195399 0 0 0 0 0 5790 0 36726 0 237915 0 0 0 David Schwartsburg Dir - IT and Security 158931 0 0 0 0 0 0 0 20565 0 179496 0 0 0 Form 990, Part I, Line 5 and Part V, Line 2a The number listed on Form 990 includes one US employee issued a Form W-2. In addition, the organization has five employees located overseas, for a total of six employees. Form 990, Part VI, Section A, line 4 The bylaws were changed to enable a new member type - that of Associate. The Associate membership is a non-voting membership, for non-operational organizations, and is given limited access to to member tools. Form 990, Part VI, Section A, line 6 Full members are security incident response teams who assist a defined constituency in preventing and handling security-related incidents; liaison members: Individuals that have a legitimate interest in and value to FIRST. Form 990, Part VI, Section A, line 7a The members of the Forum of Incident Responses and Security Teams, Inc. annually hold an election where members of the Board of Directors are elected to the Board. Members vote for any changes to the bylaws or other governing documents of the Organization. Form 990, Part VI, Section A, line 7b Board of Directors meetings as well as the annual all group meeting are documented in meeting minutes by the Secretariat of the Organization. Form 990, Part VI, Section A, line 8b The organization does not have designated committees. The Board acts on behalf of the Organization. Form 990, Part VI, Section B, line 11b The tax return is reviewed by the CFO and presented to the Board of Directors for review. Form 990, Part VI, Section B, line 12c Each director, officer, and member of a committee with board-delegated powers shall annually sign a statement which affirms that they: A. Have received a copy of the conflicts of interest policy, B. Have read and understands the policy, and C. Have agreed to comply with the policy. If a conflicts arises the Board member will abstain from voting. Outside counsel attends the orientation Board meeting for new members to review the policuy and collect signed agreements. Form 990, Part VI, Section B, line 15a The former Chair and previous CFO reviewed online data regarding salaries of other Executive Director's as well as average payment for leaders in the field of cyber security. The Full Board was involved in the input. The discussions regarding the deliberation and decisions were published to all members. Form 990, Part VI, Section C, line 19 The Organization makes the governing documents, conflicts of interest policy, and financial statements available on its website. Form 990, Part V, Lines 2a/b, Part VII, Part IX Comp & Benefits Reporting: FIRST contracts with Velocity Global as its professional employer organization (PEO). Velocity Global is the employer of record for tax, benefits, and insurance purposes for FIRST's employees. Form 990, Part XI, line 9: Foreign currency exchange loss -1,297.