﻿<?xml version="1.0" encoding="utf-8"?>
<Return xmlns="http://www.irs.gov/efile" returnVersion="2017v2.2">
  <ReturnHeader binaryAttachmentCnt="0">
    <ReturnTs>2018-05-18T13:02:36-04:00</ReturnTs>
    <TaxPeriodEndDt>2017-12-31</TaxPeriodEndDt>
    <PreparerFirmGrp>
      <PreparerFirmEIN>202474531</PreparerFirmEIN>
      <PreparerFirmName>
        <BusinessNameLine1Txt>Gregory M Brink CPA PC</BusinessNameLine1Txt>
      </PreparerFirmName>
      <PreparerUSAddress>
        <AddressLine1Txt>200 Pinner Weald Way - Suite 201</AddressLine1Txt>
        <CityNm>Cary</CityNm>
        <StateAbbreviationCd>NC</StateAbbreviationCd>
        <ZIPCd>27513</ZIPCd>
      </PreparerUSAddress>
    </PreparerFirmGrp>
    <ReturnTypeCd>990</ReturnTypeCd>
    <TaxPeriodBeginDt>2017-01-01</TaxPeriodBeginDt>
    <Filer>
      <EIN>383943584</EIN>
      <BusinessName>
        <BusinessNameLine1Txt>Forum of Incident Response and Security Teams Inc</BusinessNameLine1Txt>
      </BusinessName>
      <BusinessNameControlTxt>FIRS</BusinessNameControlTxt>
      <USAddress>
        <AddressLine1Txt>PO Box 1187</AddressLine1Txt>
        <CityNm>Morrisville</CityNm>
        <StateAbbreviationCd>NC</StateAbbreviationCd>
        <ZIPCd>27560</ZIPCd>
      </USAddress>
    </Filer>
    <BusinessOfficerGrp>
      <PersonNm>Damir Rajnovic</PersonNm>
      <PersonTitleTxt>Cheif Financial</PersonTitleTxt>
      <PhoneNum>9193802078</PhoneNum>
      <SignatureDt>2018-05-11</SignatureDt>
      <DiscussWithPaidPreparerInd>true</DiscussWithPaidPreparerInd>
    </BusinessOfficerGrp>
    <PreparerPersonGrp>
      <PreparerPersonNm>Gregory Brink CPA</PreparerPersonNm>
      <PTIN>P00408426</PTIN>
      <PhoneNum>9193802078</PhoneNum>
      <PreparationDt>2018-05-18</PreparationDt>
    </PreparerPersonGrp>
    <TaxYr>2017</TaxYr>
    <BuildTS>2022-09-23 18:48:47Z</BuildTS>
  </ReturnHeader>
  <ReturnData documentCnt="6">
    <IRS990 documentId="IRS990">
      <DoingBusinessAsName>
        <BusinessNameLine1Txt>FIRSTorg</BusinessNameLine1Txt>
      </DoingBusinessAsName>
      <PrincipalOfficerNm>Thomas Schreck</PrincipalOfficerNm>
      <GrossReceiptsAmt>2465890</GrossReceiptsAmt>
      <GroupReturnForAffiliatesInd>false</GroupReturnForAffiliatesInd>
      <Organization501c3Ind>X</Organization501c3Ind>
      <WebsiteAddressTxt>www.first.org</WebsiteAddressTxt>
      <TypeOfOrganizationCorpInd>X</TypeOfOrganizationCorpInd>
      <FormationYr>2014</FormationYr>
      <LegalDomicileStateCd>NC</LegalDomicileStateCd>
      <ActivityOrMissionDesc>To support its members in computer incident response and security and to educate both its members and the wider community regarding computer incident through the staging of meetings, symposia, and colloquia.</ActivityOrMissionDesc>
      <VotingMembersGoverningBodyCnt>10</VotingMembersGoverningBodyCnt>
      <VotingMembersIndependentCnt>10</VotingMembersIndependentCnt>
      <TotalEmployeeCnt>0</TotalEmployeeCnt>
      <TotalVolunteersCnt>43</TotalVolunteersCnt>
      <TotalGrossUBIAmt>0</TotalGrossUBIAmt>
      <NetUnrelatedBusTxblIncmAmt>0</NetUnrelatedBusTxblIncmAmt>
      <PYContributionsGrantsAmt>1089522</PYContributionsGrantsAmt>
      <CYContributionsGrantsAmt>1285662</CYContributionsGrantsAmt>
      <PYProgramServiceRevenueAmt>927442</PYProgramServiceRevenueAmt>
      <CYProgramServiceRevenueAmt>1105753</CYProgramServiceRevenueAmt>
      <CYInvestmentIncomeAmt>0</CYInvestmentIncomeAmt>
      <CYOtherRevenueAmt>74475</CYOtherRevenueAmt>
      <PYTotalRevenueAmt>2016964</PYTotalRevenueAmt>
      <CYTotalRevenueAmt>2465890</CYTotalRevenueAmt>
      <PYGrantsAndSimilarPaidAmt>6398</PYGrantsAndSimilarPaidAmt>
      <CYGrantsAndSimilarPaidAmt>0</CYGrantsAndSimilarPaidAmt>
      <CYBenefitsPaidToMembersAmt>0</CYBenefitsPaidToMembersAmt>
      <CYSalariesCompEmpBnftPaidAmt>0</CYSalariesCompEmpBnftPaidAmt>
      <CYTotalProfFndrsngExpnsAmt>0</CYTotalProfFndrsngExpnsAmt>
      <CYTotalFundraisingExpenseAmt>0</CYTotalFundraisingExpenseAmt>
      <PYOtherExpensesAmt>2294542</PYOtherExpensesAmt>
      <CYOtherExpensesAmt>2252117</CYOtherExpensesAmt>
      <PYTotalExpensesAmt>2300940</PYTotalExpensesAmt>
      <CYTotalExpensesAmt>2252117</CYTotalExpensesAmt>
      <PYRevenuesLessExpensesAmt>-283976</PYRevenuesLessExpensesAmt>
      <CYRevenuesLessExpensesAmt>213773</CYRevenuesLessExpensesAmt>
      <TotalAssetsBOYAmt>2772202</TotalAssetsBOYAmt>
      <TotalAssetsEOYAmt>3098516</TotalAssetsEOYAmt>
      <TotalLiabilitiesBOYAmt>969883</TotalLiabilitiesBOYAmt>
      <TotalLiabilitiesEOYAmt>1100575</TotalLiabilitiesEOYAmt>
      <NetAssetsOrFundBalancesBOYAmt>1802319</NetAssetsOrFundBalancesBOYAmt>
      <NetAssetsOrFundBalancesEOYAmt>1997941</NetAssetsOrFundBalancesEOYAmt>
      <MissionDesc>To support its members in computer incident response and security and to educate both its members and the wider community regarding computer incident through the staging of meetings, symposia, and colloquia.</MissionDesc>
      <SignificantNewProgramSrvcInd>false</SignificantNewProgramSrvcInd>
      <SignificantChangeInd>false</SignificantChangeInd>
      <ExpenseAmt>1002777</ExpenseAmt>
      <RevenueAmt>1411869</RevenueAmt>
      <Desc>The organization held its annual educational conference for the computer incident response and security community in June 2017 in San Juan Puerto Rico</Desc>
      <ProgSrvcAccomActy2Grp>
        <ExpenseAmt>432893</ExpenseAmt>
        <RevenueAmt>214484</RevenueAmt>
        <Desc>Various symposia and technical colloquia were held in more remote areas so that those in the industry that are unable to attend the larger affairs may share information about vulnerabilities, incidents, tools and other issues that affect the operations of incident response and security teams.</Desc>
      </ProgSrvcAccomActy2Grp>
      <ProgSrvcAccomActy3Grp>
        <ExpenseAmt>329918</ExpenseAmt>
        <Desc>Maintained worldwide website providing a growing database for computer emergency response teams worldwide and acted as a repository and current activity bulletin board for those interested in computer security.</Desc>
      </ProgSrvcAccomActy3Grp>
      <ProgSrvcAccomActyOtherGrp>
        <ExpenseAmt>49761</ExpenseAmt>
        <Desc>Oversaw the development and creation of a system of teaching those in the cybersecurity community</Desc>
      </ProgSrvcAccomActyOtherGrp>
      <ProgSrvcAccomActyOtherGrp>
        <ExpenseAmt>28923</ExpenseAmt>
        <RevenueAmt>35330</RevenueAmt>
        <Desc>Oversaw the meeting for the National CSIRT conference held in June 2017 San Juan Puerto Rico</Desc>
      </ProgSrvcAccomActyOtherGrp>
      <TotalOtherProgSrvcExpenseAmt>78684</TotalOtherProgSrvcExpenseAmt>
      <TotalOtherProgSrvcRevenueAmt>35330</TotalOtherProgSrvcRevenueAmt>
      <TotalProgramServiceExpensesAmt>1844272</TotalProgramServiceExpensesAmt>
      <DescribedInSection501c3Ind referenceDocumentId="990A">true</DescribedInSection501c3Ind>
      <ScheduleBRequiredInd referenceDocumentId="990B">true</ScheduleBRequiredInd>
      <PoliticalCampaignActyInd>false</PoliticalCampaignActyInd>
      <LobbyingActivitiesInd>false</LobbyingActivitiesInd>
      <SubjectToProxyTaxInd>false</SubjectToProxyTaxInd>
      <DonorAdvisedFundInd>false</DonorAdvisedFundInd>
      <ConservationEasementsInd>false</ConservationEasementsInd>
      <CollectionsOfArtInd>false</CollectionsOfArtInd>
      <CreditCounselingInd>false</CreditCounselingInd>
      <TempOrPermanentEndowmentsInd>false</TempOrPermanentEndowmentsInd>
      <ReportLandBuildingEquipmentInd>false</ReportLandBuildingEquipmentInd>
      <ReportInvestmentsOtherSecInd>false</ReportInvestmentsOtherSecInd>
      <ReportProgramRelatedInvstInd>false</ReportProgramRelatedInvstInd>
      <ReportOtherAssetsInd>false</ReportOtherAssetsInd>
      <ReportOtherLiabilitiesInd referenceDocumentId="990D">true</ReportOtherLiabilitiesInd>
      <IncludeFIN48FootnoteInd>false</IncludeFIN48FootnoteInd>
      <IndependentAuditFinclStmtInd>false</IndependentAuditFinclStmtInd>
      <ConsolidatedAuditFinclStmtInd>false</ConsolidatedAuditFinclStmtInd>
      <SchoolOperatingInd>false</SchoolOperatingInd>
      <ForeignOfficeInd>true</ForeignOfficeInd>
      <ForeignActivitiesInd referenceDocumentId="990F">true</ForeignActivitiesInd>
      <MoreThan5000KToOrgInd>false</MoreThan5000KToOrgInd>
      <MoreThan5000KToIndividualsInd>false</MoreThan5000KToIndividualsInd>
      <ProfessionalFundraisingInd>false</ProfessionalFundraisingInd>
      <FundraisingActivitiesInd>false</FundraisingActivitiesInd>
      <GamingActivitiesInd>false</GamingActivitiesInd>
      <OperateHospitalInd>false</OperateHospitalInd>
      <GrantsToOrganizationsInd>false</GrantsToOrganizationsInd>
      <GrantsToIndividualsInd>false</GrantsToIndividualsInd>
      <ScheduleJRequiredInd>false</ScheduleJRequiredInd>
      <TaxExemptBondsInd>false</TaxExemptBondsInd>
      <EngagedInExcessBenefitTransInd>false</EngagedInExcessBenefitTransInd>
      <PYExcessBenefitTransInd>false</PYExcessBenefitTransInd>
      <LoanOutstandingInd>false</LoanOutstandingInd>
      <GrantToRelatedPersonInd>false</GrantToRelatedPersonInd>
      <BusinessRlnWithOrgMemInd>false</BusinessRlnWithOrgMemInd>
      <BusinessRlnWithFamMemInd>false</BusinessRlnWithFamMemInd>
      <BusinessRlnWithOfficerEntInd>false</BusinessRlnWithOfficerEntInd>
      <DeductibleNonCashContriInd>false</DeductibleNonCashContriInd>
      <DeductibleArtContributionInd>false</DeductibleArtContributionInd>
      <TerminateOperationsInd>false</TerminateOperationsInd>
      <PartialLiquidationInd>false</PartialLiquidationInd>
      <DisregardedEntityInd>false</DisregardedEntityInd>
      <RelatedEntityInd>false</RelatedEntityInd>
      <RelatedOrganizationCtrlEntInd>false</RelatedOrganizationCtrlEntInd>
      <TrnsfrExmptNonChrtblRltdOrgInd>false</TrnsfrExmptNonChrtblRltdOrgInd>
      <ActivitiesConductedPrtshpInd>false</ActivitiesConductedPrtshpInd>
      <ScheduleORequiredInd>true</ScheduleORequiredInd>
      <IRPDocumentCnt>0</IRPDocumentCnt>
      <IRPDocumentW2GCnt>0</IRPDocumentW2GCnt>
      <BackupWthldComplianceInd>true</BackupWthldComplianceInd>
      <EmployeeCnt>0</EmployeeCnt>
      <EmploymentTaxReturnsFiledInd>true</EmploymentTaxReturnsFiledInd>
      <UnrelatedBusIncmOverLimitInd>false</UnrelatedBusIncmOverLimitInd>
      <ForeignFinancialAccountInd>false</ForeignFinancialAccountInd>
      <ProhibitedTaxShelterTransInd>false</ProhibitedTaxShelterTransInd>
      <TaxablePartyNotificationInd>false</TaxablePartyNotificationInd>
      <NondeductibleContributionsInd>false</NondeductibleContributionsInd>
      <QuidProQuoContributionsInd>false</QuidProQuoContributionsInd>
      <Form8282PropertyDisposedOfInd>false</Form8282PropertyDisposedOfInd>
      <RcvFndsToPayPrsnlBnftCntrctInd>false</RcvFndsToPayPrsnlBnftCntrctInd>
      <PayPremiumsPrsnlBnftCntrctInd>false</PayPremiumsPrsnlBnftCntrctInd>
      <Form8899Filedind>false</Form8899Filedind>
      <Form1098CFiledInd>false</Form1098CFiledInd>
      <IndoorTanningServicesInd>false</IndoorTanningServicesInd>
      <InfoInScheduleOPartVIInd>X</InfoInScheduleOPartVIInd>
      <GoverningBodyVotingMembersCnt>10</GoverningBodyVotingMembersCnt>
      <IndependentVotingMemberCnt>10</IndependentVotingMemberCnt>
      <FamilyOrBusinessRlnInd>false</FamilyOrBusinessRlnInd>
      <DelegationOfMgmtDutiesInd>false</DelegationOfMgmtDutiesInd>
      <ChangeToOrgDocumentsInd>false</ChangeToOrgDocumentsInd>
      <MaterialDiversionOrMisuseInd>false</MaterialDiversionOrMisuseInd>
      <MembersOrStockholdersInd>true</MembersOrStockholdersInd>
      <ElectionOfBoardMembersInd>true</ElectionOfBoardMembersInd>
      <DecisionsSubjectToApprovaInd>true</DecisionsSubjectToApprovaInd>
      <MinutesOfGoverningBodyInd>true</MinutesOfGoverningBodyInd>
      <MinutesOfCommitteesInd>true</MinutesOfCommitteesInd>
      <OfficerMailingAddressInd>false</OfficerMailingAddressInd>
      <LocalChaptersInd>false</LocalChaptersInd>
      <Form990ProvidedToGvrnBodyInd>true</Form990ProvidedToGvrnBodyInd>
      <ConflictOfInterestPolicyInd>true</ConflictOfInterestPolicyInd>
      <AnnualDisclosureCoveredPrsnInd>true</AnnualDisclosureCoveredPrsnInd>
      <RegularMonitoringEnfrcInd>false</RegularMonitoringEnfrcInd>
      <WhistleblowerPolicyInd>true</WhistleblowerPolicyInd>
      <DocumentRetentionPolicyInd>true</DocumentRetentionPolicyInd>
      <CompensationProcessCEOInd>false</CompensationProcessCEOInd>
      <CompensationProcessOtherInd>false</CompensationProcessOtherInd>
      <InvestmentInJointVentureInd>false</InvestmentInJointVentureInd>
      <OwnWebsiteInd>X</OwnWebsiteInd>
      <OtherWebsiteInd>X</OtherWebsiteInd>
      <UponRequestInd>X</UponRequestInd>
      <BooksInCareOfDetail>
        <PersonNm>Gregory M Brink CPA PC</PersonNm>
        <PhoneNum>9193802078</PhoneNum>
        <USAddress>
          <AddressLine1Txt>200 Pinner Weald Way - Suite 201</AddressLine1Txt>
          <CityNm>Cary</CityNm>
          <StateAbbreviationCd>NC</StateAbbreviationCd>
          <ZIPCd>27513</ZIPCd>
        </USAddress>
      </BooksInCareOfDetail>
      <NoListedPersonsCompensatedInd>X</NoListedPersonsCompensatedInd>
      <Form990PartVIISectionAGrp>
        <PersonNm>Thomas Schreck</PersonNm>
        <TitleTxt>Director &amp; President</TitleTxt>
        <AverageHoursPerWeekRt>10.00</AverageHoursPerWeekRt>
        <AverageHoursPerWeekRltdOrgRt>0.00</AverageHoursPerWeekRltdOrgRt>
        <IndividualTrusteeOrDirectorInd>X</IndividualTrusteeOrDirectorInd>
        <OfficerInd>X</OfficerInd>
        <ReportableCompFromOrgAmt>0</ReportableCompFromOrgAmt>
        <ReportableCompFromRltdOrgAmt>0</ReportableCompFromRltdOrgAmt>
        <OtherCompensationAmt>0</OtherCompensationAmt>
      </Form990PartVIISectionAGrp>
      <Form990PartVIISectionAGrp>
        <PersonNm>Damir Rajnovic</PersonNm>
        <TitleTxt>Director &amp; CFO</TitleTxt>
        <AverageHoursPerWeekRt>10.00</AverageHoursPerWeekRt>
        <AverageHoursPerWeekRltdOrgRt>0.00</AverageHoursPerWeekRltdOrgRt>
        <IndividualTrusteeOrDirectorInd>X</IndividualTrusteeOrDirectorInd>
        <OfficerInd>X</OfficerInd>
        <ReportableCompFromOrgAmt>0</ReportableCompFromOrgAmt>
        <ReportableCompFromRltdOrgAmt>0</ReportableCompFromRltdOrgAmt>
        <OtherCompensationAmt>0</OtherCompensationAmt>
      </Form990PartVIISectionAGrp>
      <Form990PartVIISectionAGrp>
        <PersonNm>Maarten Van Horenbeeck</PersonNm>
        <TitleTxt>Director</TitleTxt>
        <AverageHoursPerWeekRt>10.00</AverageHoursPerWeekRt>
        <AverageHoursPerWeekRltdOrgRt>0.00</AverageHoursPerWeekRltdOrgRt>
        <IndividualTrusteeOrDirectorInd>X</IndividualTrusteeOrDirectorInd>
        <ReportableCompFromOrgAmt>0</ReportableCompFromOrgAmt>
        <ReportableCompFromRltdOrgAmt>0</ReportableCompFromRltdOrgAmt>
        <OtherCompensationAmt>0</OtherCompensationAmt>
      </Form990PartVIISectionAGrp>
      <Form990PartVIISectionAGrp>
        <PersonNm>Katherine Gagnon</PersonNm>
        <TitleTxt>Director</TitleTxt>
        <AverageHoursPerWeekRt>10.00</AverageHoursPerWeekRt>
        <AverageHoursPerWeekRltdOrgRt>0.00</AverageHoursPerWeekRltdOrgRt>
        <IndividualTrusteeOrDirectorInd>X</IndividualTrusteeOrDirectorInd>
        <ReportableCompFromOrgAmt>0</ReportableCompFromOrgAmt>
        <ReportableCompFromRltdOrgAmt>0</ReportableCompFromRltdOrgAmt>
        <OtherCompensationAmt>0</OtherCompensationAmt>
      </Form990PartVIISectionAGrp>
      <Form990PartVIISectionAGrp>
        <PersonNm>Derrick Scholl</PersonNm>
        <TitleTxt>Director &amp; Deputy-CFO</TitleTxt>
        <AverageHoursPerWeekRt>10.00</AverageHoursPerWeekRt>
        <AverageHoursPerWeekRltdOrgRt>0.00</AverageHoursPerWeekRltdOrgRt>
        <IndividualTrusteeOrDirectorInd>X</IndividualTrusteeOrDirectorInd>
        <OfficerInd>X</OfficerInd>
        <ReportableCompFromOrgAmt>0</ReportableCompFromOrgAmt>
        <ReportableCompFromRltdOrgAmt>0</ReportableCompFromRltdOrgAmt>
        <OtherCompensationAmt>0</OtherCompensationAmt>
      </Form990PartVIISectionAGrp>
      <Form990PartVIISectionAGrp>
        <PersonNm>Adli Wahid</PersonNm>
        <TitleTxt>Director</TitleTxt>
        <AverageHoursPerWeekRt>10.00</AverageHoursPerWeekRt>
        <AverageHoursPerWeekRltdOrgRt>0.00</AverageHoursPerWeekRltdOrgRt>
        <IndividualTrusteeOrDirectorInd>X</IndividualTrusteeOrDirectorInd>
        <ReportableCompFromOrgAmt>0</ReportableCompFromOrgAmt>
        <ReportableCompFromRltdOrgAmt>0</ReportableCompFromRltdOrgAmt>
        <OtherCompensationAmt>0</OtherCompensationAmt>
      </Form990PartVIISectionAGrp>
      <Form990PartVIISectionAGrp>
        <PersonNm>Serge Droz</PersonNm>
        <TitleTxt>Director</TitleTxt>
        <AverageHoursPerWeekRt>10.00</AverageHoursPerWeekRt>
        <AverageHoursPerWeekRltdOrgRt>0.00</AverageHoursPerWeekRltdOrgRt>
        <IndividualTrusteeOrDirectorInd>X</IndividualTrusteeOrDirectorInd>
        <ReportableCompFromOrgAmt>0</ReportableCompFromOrgAmt>
        <ReportableCompFromRltdOrgAmt>0</ReportableCompFromRltdOrgAmt>
        <OtherCompensationAmt>0</OtherCompensationAmt>
      </Form990PartVIISectionAGrp>
      <Form990PartVIISectionAGrp>
        <PersonNm>L Aaron Kaplan</PersonNm>
        <TitleTxt>Director</TitleTxt>
        <AverageHoursPerWeekRt>10.00</AverageHoursPerWeekRt>
        <AverageHoursPerWeekRltdOrgRt>0.00</AverageHoursPerWeekRltdOrgRt>
        <IndividualTrusteeOrDirectorInd>X</IndividualTrusteeOrDirectorInd>
        <ReportableCompFromOrgAmt>0</ReportableCompFromOrgAmt>
        <ReportableCompFromRltdOrgAmt>0</ReportableCompFromRltdOrgAmt>
        <OtherCompensationAmt>0</OtherCompensationAmt>
      </Form990PartVIISectionAGrp>
      <Form990PartVIISectionAGrp>
        <PersonNm>Koichiro Komiyama</PersonNm>
        <TitleTxt>Director</TitleTxt>
        <AverageHoursPerWeekRt>10.00</AverageHoursPerWeekRt>
        <AverageHoursPerWeekRltdOrgRt>0.00</AverageHoursPerWeekRltdOrgRt>
        <IndividualTrusteeOrDirectorInd>X</IndividualTrusteeOrDirectorInd>
        <ReportableCompFromOrgAmt>0</ReportableCompFromOrgAmt>
        <ReportableCompFromRltdOrgAmt>0</ReportableCompFromRltdOrgAmt>
        <OtherCompensationAmt>0</OtherCompensationAmt>
      </Form990PartVIISectionAGrp>
      <Form990PartVIISectionAGrp>
        <PersonNm>Margrete Raaum</PersonNm>
        <TitleTxt>Director</TitleTxt>
        <AverageHoursPerWeekRt>10.00</AverageHoursPerWeekRt>
        <AverageHoursPerWeekRltdOrgRt>0.00</AverageHoursPerWeekRltdOrgRt>
        <IndividualTrusteeOrDirectorInd>X</IndividualTrusteeOrDirectorInd>
        <ReportableCompFromOrgAmt>0</ReportableCompFromOrgAmt>
        <ReportableCompFromRltdOrgAmt>0</ReportableCompFromRltdOrgAmt>
        <OtherCompensationAmt>0</OtherCompensationAmt>
      </Form990PartVIISectionAGrp>
      <TotalReportableCompFromOrgAmt>0</TotalReportableCompFromOrgAmt>
      <TotReportableCompRltdOrgAmt>0</TotReportableCompRltdOrgAmt>
      <TotalOtherCompensationAmt>0</TotalOtherCompensationAmt>
      <IndivRcvdGreaterThan100KCnt>0</IndivRcvdGreaterThan100KCnt>
      <FormerOfcrEmployeesListedInd>false</FormerOfcrEmployeesListedInd>
      <TotalCompGreaterThan150KInd>false</TotalCompGreaterThan150KInd>
      <CompensationFromOtherSrcsInd>false</CompensationFromOtherSrcsInd>
      <ContractorCompensationGrp>
        <ContractorName>
          <PersonNm>Neustar</PersonNm>
        </ContractorName>
        <ContractorAddress>
          <USAddress>
            <AddressLine1Txt>21575 Ridgetop Circle</AddressLine1Txt>
            <CityNm>Sterling</CityNm>
            <StateAbbreviationCd>VA</StateAbbreviationCd>
            <ZIPCd>20166</ZIPCd>
          </USAddress>
        </ContractorAddress>
        <ServicesDesc>Secretariat</ServicesDesc>
        <CompensationAmt>161938</CompensationAmt>
      </ContractorCompensationGrp>
      <ContractorCompensationGrp>
        <ContractorName>
          <PersonNm>Conference and Publication Services</PersonNm>
        </ContractorName>
        <ContractorAddress>
          <USAddress>
            <AddressLine1Txt>219 W Chicago Ave-300</AddressLine1Txt>
            <CityNm>Chicago</CityNm>
            <StateAbbreviationCd>IL</StateAbbreviationCd>
            <ZIPCd>60654</ZIPCd>
          </USAddress>
        </ContractorAddress>
        <ServicesDesc>Event Managment</ServicesDesc>
        <CompensationAmt>147122</CompensationAmt>
      </ContractorCompensationGrp>
      <CntrctRcvdGreaterThan100KCnt>2</CntrctRcvdGreaterThan100KCnt>
      <MembershipDuesAmt>804207</MembershipDuesAmt>
      <GovernmentGrantsAmt>109455</GovernmentGrantsAmt>
      <AllOtherContributionsAmt>372000</AllOtherContributionsAmt>
      <TotalContributionsAmt>1285662</TotalContributionsAmt>
      <ProgramServiceRevenueGrp>
        <Desc>Conf Registration Fees</Desc>
        <BusinessCd>611710</BusinessCd>
        <TotalRevenueColumnAmt>991394</TotalRevenueColumnAmt>
        <RelatedOrExemptFuncIncomeAmt>991394</RelatedOrExemptFuncIncomeAmt>
      </ProgramServiceRevenueGrp>
      <ProgramServiceRevenueGrp>
        <Desc>NCSIRT Registration Fee</Desc>
        <BusinessCd>611710</BusinessCd>
        <TotalRevenueColumnAmt>35330</TotalRevenueColumnAmt>
        <RelatedOrExemptFuncIncomeAmt>35330</RelatedOrExemptFuncIncomeAmt>
      </ProgramServiceRevenueGrp>
      <ProgramServiceRevenueGrp>
        <Desc>SymposiaTC Registratio</Desc>
        <BusinessCd>611710</BusinessCd>
        <TotalRevenueColumnAmt>64029</TotalRevenueColumnAmt>
        <RelatedOrExemptFuncIncomeAmt>64029</RelatedOrExemptFuncIncomeAmt>
      </ProgramServiceRevenueGrp>
      <ProgramServiceRevenueGrp>
        <Desc>Exhibitor Fees</Desc>
        <BusinessCd>611710</BusinessCd>
        <TotalRevenueColumnAmt>15000</TotalRevenueColumnAmt>
        <RelatedOrExemptFuncIncomeAmt>15000</RelatedOrExemptFuncIncomeAmt>
      </ProgramServiceRevenueGrp>
      <TotalProgramServiceRevenueAmt>1105753</TotalProgramServiceRevenueAmt>
      <OtherRevenueMiscGrp>
        <Desc>VAT Refund from Event</Desc>
        <BusinessCd>611710</BusinessCd>
        <TotalRevenueColumnAmt>74475</TotalRevenueColumnAmt>
        <RelatedOrExemptFuncIncomeAmt>74475</RelatedOrExemptFuncIncomeAmt>
      </OtherRevenueMiscGrp>
      <OtherRevenueTotalAmt>74475</OtherRevenueTotalAmt>
      <TotalRevenueGrp>
        <TotalRevenueColumnAmt>2465890</TotalRevenueColumnAmt>
        <RelatedOrExemptFuncIncomeAmt>1180228</RelatedOrExemptFuncIncomeAmt>
        <UnrelatedBusinessRevenueAmt>0</UnrelatedBusinessRevenueAmt>
        <ExclusionAmt>0</ExclusionAmt>
      </TotalRevenueGrp>
      <FeesForServicesLegalGrp>
        <TotalAmt>19688</TotalAmt>
        <ManagementAndGeneralAmt>19688</ManagementAndGeneralAmt>
      </FeesForServicesLegalGrp>
      <FeesForServicesAccountingGrp>
        <TotalAmt>56047</TotalAmt>
        <ManagementAndGeneralAmt>56047</ManagementAndGeneralAmt>
      </FeesForServicesAccountingGrp>
      <AdvertisingGrp>
        <TotalAmt>34451</TotalAmt>
        <ProgramServicesAmt>24567</ProgramServicesAmt>
        <ManagementAndGeneralAmt>9884</ManagementAndGeneralAmt>
      </AdvertisingGrp>
      <InformationTechnologyGrp>
        <TotalAmt>373943</TotalAmt>
        <ProgramServicesAmt>373943</ProgramServicesAmt>
      </InformationTechnologyGrp>
      <OccupancyGrp>
        <TotalAmt>875736</TotalAmt>
        <ProgramServicesAmt>833424</ProgramServicesAmt>
        <ManagementAndGeneralAmt>42312</ManagementAndGeneralAmt>
      </OccupancyGrp>
      <TravelGrp>
        <TotalAmt>166163</TotalAmt>
        <ProgramServicesAmt>94445</ProgramServicesAmt>
        <ManagementAndGeneralAmt>71718</ManagementAndGeneralAmt>
      </TravelGrp>
      <InsuranceGrp>
        <TotalAmt>10447</TotalAmt>
        <ManagementAndGeneralAmt>10447</ManagementAndGeneralAmt>
      </InsuranceGrp>
      <OtherExpensesGrp>
        <Desc>Bad-Debt</Desc>
        <TotalAmt>40250</TotalAmt>
        <ManagementAndGeneralAmt>40250</ManagementAndGeneralAmt>
      </OtherExpensesGrp>
      <OtherExpensesGrp>
        <Desc>Entertainment and meals</Desc>
        <TotalAmt>78430</TotalAmt>
        <ProgramServicesAmt>74903</ProgramServicesAmt>
        <ManagementAndGeneralAmt>3527</ManagementAndGeneralAmt>
      </OtherExpensesGrp>
      <OtherExpensesGrp>
        <Desc>Program Management Fees</Desc>
        <TotalAmt>246441</TotalAmt>
        <ProgramServicesAmt>246441</ProgramServicesAmt>
      </OtherExpensesGrp>
      <OtherExpensesGrp>
        <Desc>Secretariat Services</Desc>
        <TotalAmt>133760</TotalAmt>
        <ManagementAndGeneralAmt>133760</ManagementAndGeneralAmt>
      </OtherExpensesGrp>
      <AllOtherExpensesGrp>
        <TotalAmt>216761</TotalAmt>
        <ProgramServicesAmt>196549</ProgramServicesAmt>
        <ManagementAndGeneralAmt>20212</ManagementAndGeneralAmt>
      </AllOtherExpensesGrp>
      <TotalFunctionalExpensesGrp>
        <TotalAmt>2252117</TotalAmt>
        <ProgramServicesAmt>1844272</ProgramServicesAmt>
        <ManagementAndGeneralAmt>407845</ManagementAndGeneralAmt>
        <FundraisingAmt>0</FundraisingAmt>
      </TotalFunctionalExpensesGrp>
      <CashNonInterestBearingGrp>
        <BOYAmt>1762324</BOYAmt>
        <EOYAmt>1890433</EOYAmt>
      </CashNonInterestBearingGrp>
      <AccountsReceivableGrp>
        <BOYAmt>670814</BOYAmt>
        <EOYAmt>957750</EOYAmt>
      </AccountsReceivableGrp>
      <PrepaidExpensesDefrdChargesGrp>
        <BOYAmt>339064</BOYAmt>
        <EOYAmt>250333</EOYAmt>
      </PrepaidExpensesDefrdChargesGrp>
      <TotalAssetsGrp>
        <BOYAmt>2772202</BOYAmt>
        <EOYAmt>3098516</EOYAmt>
      </TotalAssetsGrp>
      <AccountsPayableAccrExpnssGrp>
        <BOYAmt>87777</BOYAmt>
        <EOYAmt>91944</EOYAmt>
      </AccountsPayableAccrExpnssGrp>
      <DeferredRevenueGrp>
        <BOYAmt>876322</BOYAmt>
        <EOYAmt>996352</EOYAmt>
      </DeferredRevenueGrp>
      <OtherLiabilitiesGrp>
        <BOYAmt>5784</BOYAmt>
        <EOYAmt>12279</EOYAmt>
      </OtherLiabilitiesGrp>
      <TotalLiabilitiesGrp>
        <BOYAmt>969883</BOYAmt>
        <EOYAmt>1100575</EOYAmt>
      </TotalLiabilitiesGrp>
      <OrganizationFollowsSFAS117Ind>X</OrganizationFollowsSFAS117Ind>
      <UnrestrictedNetAssetsGrp>
        <BOYAmt>1795740</BOYAmt>
        <EOYAmt>1991362</EOYAmt>
      </UnrestrictedNetAssetsGrp>
      <TemporarilyRstrNetAssetsGrp>
        <BOYAmt>6579</BOYAmt>
        <EOYAmt>6579</EOYAmt>
      </TemporarilyRstrNetAssetsGrp>
      <TotalNetAssetsFundBalanceGrp>
        <BOYAmt>1802319</BOYAmt>
        <EOYAmt>1997941</EOYAmt>
      </TotalNetAssetsFundBalanceGrp>
      <TotLiabNetAssetsFundBalanceGrp>
        <BOYAmt>2772202</BOYAmt>
        <EOYAmt>3098516</EOYAmt>
      </TotLiabNetAssetsFundBalanceGrp>
      <ReconcilationRevenueExpnssAmt>213773</ReconcilationRevenueExpnssAmt>
      <PriorPeriodAdjustmentsAmt>-18151</PriorPeriodAdjustmentsAmt>
      <OtherChangesInNetAssetsAmt>0</OtherChangesInNetAssetsAmt>
      <MethodOfAccountingAccrualInd>X</MethodOfAccountingAccrualInd>
      <AccountantCompileOrReviewInd>false</AccountantCompileOrReviewInd>
      <FSAuditedInd>false</FSAuditedInd>
      <FederalGrantAuditRequiredInd>false</FederalGrantAuditRequiredInd>
    </IRS990>
    <IRS990ScheduleA documentId="990A">
      <PubliclySupportedOrg509a2Ind>X</PubliclySupportedOrg509a2Ind>
      <GiftsGrantsContrisRcvd509Grp>
        <CurrentTaxYearMinus2YearsAmt>1323218</CurrentTaxYearMinus2YearsAmt>
        <CurrentTaxYearMinus1YearAmt>1089522</CurrentTaxYearMinus1YearAmt>
        <CurrentTaxYearAmt>1285662</CurrentTaxYearAmt>
        <TotalAmt>3698402</TotalAmt>
      </GiftsGrantsContrisRcvd509Grp>
      <GrossReceiptsAdmissionsGrp>
        <CurrentTaxYearMinus3YearsAmt>300</CurrentTaxYearMinus3YearsAmt>
        <CurrentTaxYearMinus2YearsAmt>1087912</CurrentTaxYearMinus2YearsAmt>
        <CurrentTaxYearMinus1YearAmt>927442</CurrentTaxYearMinus1YearAmt>
        <CurrentTaxYearAmt>1105753</CurrentTaxYearAmt>
        <TotalAmt>3121407</TotalAmt>
      </GrossReceiptsAdmissionsGrp>
      <Total509Grp>
        <CurrentTaxYearMinus3YearsAmt>300</CurrentTaxYearMinus3YearsAmt>
        <CurrentTaxYearMinus2YearsAmt>2411130</CurrentTaxYearMinus2YearsAmt>
        <CurrentTaxYearMinus1YearAmt>2016964</CurrentTaxYearMinus1YearAmt>
        <CurrentTaxYearAmt>2391415</CurrentTaxYearAmt>
        <TotalAmt>6819809</TotalAmt>
      </Total509Grp>
      <PublicSupportTotal509Amt>6819809</PublicSupportTotal509Amt>
      <OtherIncome509Grp>
        <CurrentTaxYearAmt>74475</CurrentTaxYearAmt>
        <TotalAmt>74475</TotalAmt>
      </OtherIncome509Grp>
      <TotalSupportCalendarYearGrp>
        <CurrentTaxYearMinus4YearsAmt>0</CurrentTaxYearMinus4YearsAmt>
        <CurrentTaxYearMinus3YearsAmt>300</CurrentTaxYearMinus3YearsAmt>
        <CurrentTaxYearMinus2YearsAmt>2411130</CurrentTaxYearMinus2YearsAmt>
        <CurrentTaxYearMinus1YearAmt>2016964</CurrentTaxYearMinus1YearAmt>
        <CurrentTaxYearAmt>2465890</CurrentTaxYearAmt>
        <TotalAmt>6894284</TotalAmt>
      </TotalSupportCalendarYearGrp>
      <PublicSupportCY509Pct>0.98920</PublicSupportCY509Pct>
      <PublicSupportPY509Pct>0.00000</PublicSupportPY509Pct>
      <InvestmentIncomeCYPct>0.00000</InvestmentIncomeCYPct>
      <InvestmentIncomePYPct>0.00000</InvestmentIncomePYPct>
      <ThirtyThrPctSuprtTestsCY509Ind>X</ThirtyThrPctSuprtTestsCY509Ind>
    </IRS990ScheduleA>
    <IRS990ScheduleB documentId="990B">
      <ContributorInformationGrp>
        <ContributorNum>RESTRICTED</ContributorNum>
        <ContributorBusinessName>
          <BusinessNameLine1>RESTRICTED</BusinessNameLine1>
        </ContributorBusinessName>
        <ContributorUSAddress>
          <AddressLine1>RESTRICTED</AddressLine1>
          <AddressLine2>RESTRICTED</AddressLine2>
          <City>RESTRICTED</City>
          <State>RESTRICTED</State>
          <ZIPCode>RESTRICTED</ZIPCode>
        </ContributorUSAddress>
        <TotalContributionsAmt>RESTRICTED</TotalContributionsAmt>
      </ContributorInformationGrp>
    </IRS990ScheduleB>
    <IRS990ScheduleD documentId="990D">
      <OtherLiabilitiesOrgGrp>
        <Desc>Credit Card Payable</Desc>
        <Amt>10062</Amt>
      </OtherLiabilitiesOrgGrp>
      <OtherLiabilitiesOrgGrp>
        <Desc>Other Payable</Desc>
        <Amt>2217</Amt>
      </OtherLiabilitiesOrgGrp>
      <TotalLiabilityAmt>12279</TotalLiabilityAmt>
    </IRS990ScheduleD>
    <IRS990ScheduleF documentId="990F">
      <GrantRecordsMaintainedInd>false</GrantRecordsMaintainedInd>
      <AccountActivitiesOutsideUSGrp>
        <RegionTxt>Europe including Iceland and Greenland</RegionTxt>
        <TypeOfActivitiesConductedTxt>Program services</TypeOfActivitiesConductedTxt>
        <SpecificServicesProvidedTxt>Symposia</SpecificServicesProvidedTxt>
        <RegionTotalExpendituresAmt>36984</RegionTotalExpendituresAmt>
      </AccountActivitiesOutsideUSGrp>
      <AccountActivitiesOutsideUSGrp>
        <RegionTxt>Middle East and North Africa</RegionTxt>
        <TypeOfActivitiesConductedTxt>Program services</TypeOfActivitiesConductedTxt>
        <SpecificServicesProvidedTxt>Sympoium</SpecificServicesProvidedTxt>
        <RegionTotalExpendituresAmt>9000</RegionTotalExpendituresAmt>
      </AccountActivitiesOutsideUSGrp>
      <AccountActivitiesOutsideUSGrp>
        <RegionTxt>East Asia and the Pacific</RegionTxt>
        <TypeOfActivitiesConductedTxt>Program services</TypeOfActivitiesConductedTxt>
        <SpecificServicesProvidedTxt>Symposium</SpecificServicesProvidedTxt>
        <RegionTotalExpendituresAmt>7978</RegionTotalExpendituresAmt>
      </AccountActivitiesOutsideUSGrp>
      <SubtotalSpentAmt>53962</SubtotalSpentAmt>
      <TotalSpentAmt>53962</TotalSpentAmt>
    </IRS990ScheduleF>
    <IRS990ScheduleO documentId="990O">
      <SupplementalInformationDetail>
        <FormAndLineReferenceDesc>Members or stockholder classes and rights Part VI line 6</FormAndLineReferenceDesc>
        <ExplanationTxt>Forum of Incident Response and Security Teams, Inc is a non-profit membership corporation made up of members who vote for the Board members</ExplanationTxt>
      </SupplementalInformationDetail>
      <SupplementalInformationDetail>
        <FormAndLineReferenceDesc>Member election for additional members Part VI line 7a</FormAndLineReferenceDesc>
        <ExplanationTxt>The members of the Forum of Incident Response and Security Teams, Inc annually hold an election in which members of the Board of Directors is elected to the Board. Members vote for any changes to the bylaws or other governing documents of the organization</ExplanationTxt>
      </SupplementalInformationDetail>
      <SupplementalInformationDetail>
        <FormAndLineReferenceDesc>Governing body decisions Part VI line 7b</FormAndLineReferenceDesc>
        <ExplanationTxt>Board of directors meetings as well as the annual all group meeting are documented in meeting minutes by the secretariat of the organization</ExplanationTxt>
      </SupplementalInformationDetail>
      <SupplementalInformationDetail>
        <FormAndLineReferenceDesc>Form 990 governing body review Part VI line 11</FormAndLineReferenceDesc>
        <ExplanationTxt>The tax return is reviewed by the CFO and presented to the Board of Directors for review</ExplanationTxt>
      </SupplementalInformationDetail>
      <SupplementalInformationDetail>
        <FormAndLineReferenceDesc>Governing documents etc available to public Part VI line 19</FormAndLineReferenceDesc>
        <ExplanationTxt>The organization makes the governing documents, conflict of interest policy, and financial statements available on its website</ExplanationTxt>
      </SupplementalInformationDetail>
    </IRS990ScheduleO>
  </ReturnData>
</Return>