This policy brief examines how the design and functioning of national computer security incident response teams (CSIRTs) shape their ability to cooperate domestically and internationally.
Drawing on desk research and interviews with national CSIRTs, as well as international and regional networks, the brief analyses how domestic institutional arrangements influence their capacity for effective information exchange and collaboration. It explores cooperation at the bilateral, regional and global levels.
The brief also identifies key challenges and highlights good practices to enhance information exchange and coordination. In addition, it offers practical recommendations to support States in strengthening national computer security incident response teams and advancing responsible State behaviour in cyberspace.
Citation: Samuele Dominioni and Helena Hinkel, Strengthening National CSIRT Cooperation: From Domestic Setups to International Networks (Geneva: UNIDIR, 2026)