2022-10-24T13:01:51-05:00 2021-12-31 582676261 Rogers & Company PLLC 8300 Boone Boulevard Suite 600 Vienna VA 22182 990 2021-01-01 383943584 Forum of Incident Response and Security Teams Inc FORU 9196546805 2500 Regency Parkway Cary NC 27518 Sherif Hashem Chair 9196546805 2022-10-21 1 Sherif Hashem 999009999 Hemali Kane EA P01337292 7038930300 2022-10-19 0 AAL1 IAL1 2021 2022-09-23 18:48:47Z FIRST Sherif Hashem 2500 Regency Parkway Cary NC 27518 1593794 0 X www.first.org X 2014 NC FIRST aspires to bring together incident response and security teams from every country across the world to ensure a safe internet for all. 10 10 1 43 0 0 1167506 1446243 96324 147551 0 0 4026 0 1267856 1593794 0 0 0 0 190230 278823 0 0 0 1306529 1091008 1496759 1369831 -228903 223963 3839879 3169610 1519530 645686 2320349 2523924 X FIRST aspires to bring together incident response and security teams from every country across the world to ensure a safe internet for all. Effective response is a global task, mirroring the global nature of the internet. Based on a peer to peer network governance model, computer security incident response teams (CSIRTS), product security incident response teams (PSIRTS) and independent security researchers work together to limit the damage of security incidents. This requires a high level of trust; the fuel our members run on. FIRST fosters trust building among member through a variety of activities. Incidents are not confined to one cultural or political corner of the internet, nor do they respect borders or boundaries. FIRST thus promotes inclusiveness, inviting membership from all geographic and cultural regions. 0 0 302345 137960 FIRST held its 33rd annual conference virtually in June 2021. More than6,420 security professionals from over 79 countries attended sessionson industry best practices, reviews of incident handling, and tools andtraining, and heard keynotes from industry recognized experts. 431526 Besides the annual conference FIRST and its members organize up to 19 smaller events around the globe which typically have a regional or topical focus. These events cater to a more specialized or local audience. Community driven, these events help participants to force valuable connections which are invaluable during a security incident. Participants discuss security relevant technical topics, tools as well as best practice. Many of the events co-host training courses in the area of incident response. In 2021, due to ongoing Covid-19 pandemic, a majority of these events were conducted using an online format. 147427 9591 FIRST provides several online services supporting members in handling security incidents more efficiently. This includes a website containing verified contact information, best practices and much more information. Operational information is made available through electronic interfaces to be incorporated directly into members' tools. FIRST has over 550 member teams located in more than 96 countries. Member teams include large vendors, national certs, telcos, research institutes, and many more. FIRST Hosts International Standards like the common vulnerability scoring system (CVSS). 881298 1 1 0 0 0 0 0 0 0 0 1 0 0 0 0 1 1 0 0 1 1 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 4 0 1 1 1 0 0 0 0 0 1 0 0 0 0 0 0 0 X 10 10 0 0 0 0 1 1 1 1 0 0 0 1 1 1 1 1 1 1 0 0 NC X Chris Gibson 9196546805 2500 Regency Parkway Cary NC 27518 X Dave Schwartzburg Chair 10.00 X X 0 0 0 Alexander Jaeger CFO/Chair 10.00 X X 0 0 0 Michael Hausding CFO 10.00 X 0 0 0 Serge Droz Director 10.00 X 0 0 0 Javier Berciano Director 10.00 X 0 0 0 Shawn Richardson Director 10.00 X 0 0 0 Mona Elisabeth Ostvang Director 10.00 X 0 0 0 Sherif Hashem Director 10.00 X 0 0 0 Tracy Bills Director 10.00 X 0 0 0 Yukako Uchida Director 10.00 X 0 0 0 Thomas Schreck Director 10.00 X 0 0 0 Masato Terada Director 10.00 X 0 0 0 Maarten Van Horenbeeck Director 10.00 X 0 0 0 Andrea Dufkova Director 10.00 X 0 0 0 Damir Rajnovic Director 10.00 X 0 0 0 Chris Gibson Executive Director 40.00 X 188866 0 10695 188866 0 10695 1 0 1 0 Conference & Publication Service 2525 N Sheffield Avenue 2E Chicago IL 60614 Event Management 225053 Security Services LLC 45980 Center Oak Plaza Sterling VA 20166 Security Services 163404 Clements Bernard 4500 Cameron Way Suite 350 Charlotte NC 28211 Legal Services 133559 3 1214357 231886 1446243 Sponsorship 900099 95591 95591 Conference revenue 900099 43960 43960 Education programs 900099 8000 8000 147551 1593794 147551 0 0 X 199560 139692 59868 79263 55484 23779 130131 97718 32413 84792 84792 166992 127503 39489 52256 1226 51030 48474 23768 24706 287160 201012 86148 5284 5284 16169 2414 13755 10612 7428 3184 Program management 225053 225053 Bad debt 64085 64085 1369831 881298 488533 0 2291787 2015980 815388 20100 731628 1133170 5099 4739 1076 360 3839879 3169610 94326 116111 1256570 529575 168634 0 1519530 645686 X 2320349 2387291 136633 2320349 2523924 3839879 3169610 X 223963 -22 -20366 X 0 1 X 1 0 X 1285662 1118146 984484 1167506 1446243 6002041 1105753 1236288 2112129 96324 147551 4698045 2391415 2354434 3096613 1263830 1593794 10700086 0 2321 185861 188182 2321 185861 188182 10511904 74475 46500 201 4026 125202 2465890 2400934 3096814 1267856 1593794 10825288 0.97110 0.98870 0.00000 X RESTRICTED RESTRICTED RESTRICTED RESTRICTED RESTRICTED RESTRICTED RESTRICTED RESTRICTED 5099 4739 360 360 X 1593794 0 1593794 0 1593794 1390197 20366 20366 1369831 0 1369831 Part X, Line 2: Management has evaluated FIRST's tax positions and concluded that FIRST's financial statements do not include any uncertain tax positions. Part XII, Line 2d - Other Adjustments: Foreign currency exchange loss 20,366. Europe (Including Iceland & Greenland) 1 Program services Programs and General Admin Management 199561 Europe (Including Iceland & Greenland) - Albania, Andorra, Austria, Belgium 0 0 Program Services Virtual Conference 34313 0 1 0 0 0 1 233874 0 233874 0 0 0 0 0 0 Part III Accounting Method: X X X 0 0 0 0 0 0 0 0 0 Chris Gibson Executive Director 188866 0 0 0 0 0 0 0 10695 0 199561 0 0 0 Form 990, Part VI, Section A, line 6 Full members are security incident response teams who assist a defined constituency in preventing and handling security-related incidents; liaison members: Individuals that have a legitimate interest in and value to FIRST. Form 990, Part VI, Section A, line 7a The members of the Forum of Incident Responses and Security Teams, Inc. annually hold an election where members of the Board of Directors are elected to the Board. Members vote for any changes to the bylaws or other governing documents of the Organization. Form 990, Part VI, Section A, line 7b Board of Directors meetings as well as the annual all group meeting are documented in meeting minutes by the Secretariat of the Organization. Form 990, Part VI, Section A, line 8b The organization does not have designated committees. The Board acts on behalf of the Organization. Form 990, Part VI, Section B, line 11b The tax return is reviewed by the CFO and presented to the Board of Directors for review. Form 990, Part VI, Section B, line 12c Each director, officer, and member of a committee with board-delegated powers shall annually sign a statement which affirms that they: A. Have received a copy of the conflicts of interest policy, B. Have read and understands the policy, and C. Have agreed to comply with the policy. If a conflicts arises the Board member will abstain from voting. Outside counsel attends the orientation Board meeting for new members to review the policuy and collect signed agreements. Form 990, Part VI, Section B, line 15a The former Chair and previous CFO reviewed online data regarding salaries of other Executive Director's as well as average payment for leaders in the field of cyber security. The Full Board was involved in the input. The discussions regarding the deliberation and decisions were published to all members. Form 990, Part VI, Section C, line 19 The Organization makes the governing documents, conflicts of interest policy, and financial statements available on its website. Form 990, Part V, Lines 2a/b, Part VII, Part IX Comp & Benefits Reporting FIRST contracts with Velocity Global as its professional employer organization (PEO). Velocity Global is the employer of record for tax, benefits, and insurance purposes for FIRST's employees. Form 990, Part IX, line 11g Other professional fees: Program service expenses 127,503. Management and general expenses 39,489. Fundraising expenses 0. Total expenses 166,992. Form 990, Part XI, line 9: Foreign currency exchange loss -20,366.