If your team would like to become part of the TBA community: Your team needs to be registered or "listed" to achieve this. The process is simple enough and once you have secured your sponsors it will take 4 to 5 weeks to conclude a vote of the TBA and inform you about the outcome:
- fill out the form for new listing candidates
- sign the signature page with the basic conditions which is sent to you with your invitation
- submit the filled out and signed materials with the relevant PGP/GPG public keys to firstname.lastname@example.org
If your team would like to understand more about the process: Read on and have a look at the process!
The Process for new Listing Candidates
The TBA team encourages all applying teams to engage already listed TBA teams to solicitate their support!
After a team has applied for listing as summarized above the process continues:
- The listing application is distributed inside the TBA community.
- Within three weeks the applying candidate team needs to have explicite support of the TBA Steering Committee. (This will change in the future once there are enough TBA Accredited teams, in which case a sponsorship process and voting will be introduced)
- Additionally no objections must be raised within the TBA community. Any member from the TBA community, i.e. listed teams, accredited teams, TBA Associates, can object against a candidate. Objections will be handled with care - the TBA team will negotiate the needed confidentiality with the objecter.
- The TBA team informs the TBA community of the outcome of the application.
- Rejected teams do have the right to re-apply right after they receive the outcome message, although we recommend to take some time to discuss with potential sponsoring teams any new registration application to be sure, the voting passed in favour of your team the next time.
- After three or more consecutive rejections any new registration application will be automatically rejected without any consideration.
- If a automatically rejected team believes that the situation or circumstances (causing the rejection) has changed significantly, it might request a decision of the TF-CSIRT Steering Committee to allow a new registration application. It is important that the team explains what has changed and why it is likely that the team will be accepted this time.
Re-Listing every three years
To increase the default trust level within the TBA Community, all "listed" teams that have not become "accredited" within three years after their initial registration or the last successful "re-listing" are required to be accepted for another three year period. Again this requires explicit support by the TBA community. If there is no support, the team will be removed and no longer shown as "listed". For the re-listing the same procedure as for the "listing" is used.
In addition, the procedures require any re-listing candidate to meet the following conditions:
- having two people registered as team representatives -- two for resiliency, each of those must have a valid e-mail address and valid PGP/GPG key
- valid team e-mail address and PGP/GPG key for the team
- latest update or up-to-date notice of team information within the TBA Directory not older than 12 months
The TBA team encourages all listed teams to attend TBA and other relevant meetings to meet other teams and secure the on-going support of the community!
Useful materials for this process are:
- form for registering new listing candidates