The FIRST membership process

Version 1.4, September 24, 2021
Also available in PDF.
Please see Annex 1 for a list of acrynoms and terms.

1. Types of Participation

There are two types of participants in the FIRST:

The selection and responsibilities of each type of participant are described in this framework. Throughout this framework "participant" is used when a regulation is valid for Full Members and Liaisons.

1.1. Full Members

A FIRST Full Member is a team of at least two individuals. Every Full Member is represented by a FIRST representative (see 2.2.1).

1.2. Liaisons

Individuals can participate in FIRST by applying for the Liaison membership.

2. Membership Processes

2.1. Nomination Acceptance Procedures

New Full Members of FIRST must be nominated by two existing Full Members. New Liaisons must be nominated by one existing Full Member. The nominating Full Members are then called "sponsors". The primary sponsor may not be related to the applying team host/parent organization.

2.1.1. Approval Rules

Each nomination has to be approved by a 2/3 vote of all members of the Board of Directors and the nominee must pay the initial membership fee upon Board of Directors approval for membership.

After approval by the BD the applying participant's status is changed from "applying" (cf. 2.1.3) to "confirmed" (cf. 2.2.2).

2.1.2. Mandatory Information

A proposed new FIRST participant must provide the following information in support of its nomination:

2.1.3. Application Process

To start the process of FIRST application, the applying participant and their sponsor(s) should begin the online application form and complete within one year. If the application isn't completed/successful within that time, the pending application will be deleted and the process should be started again.

The Secretariat will inform the Membership Committee (MC), teams list and the Board of Directors (BD) about new applications that are completed by the monthly deadline.

For applying new Full Members a site visit is mandatory. By a 2/3 vote of the MC and the BD the site visit can be omitted, if requested by both sponsors.

2.1.4. Site visit

At their April 2020 meeting, the Board voted to suspend the requirement for a physical site visit for applying members until further notice. Sponsoring teams may conduct a virtual site visit. Please note additional considerations for virtual site visit here.

The site visit is an essential part of the application. Among other questions at least the following topics should be covered:

Applying teams and sponsors should review the FIRST Site Visit - Requirements and Assessment (version 3.1) in PDF format and the FIRST Membership Sponsoring Process.

2.2. The membership process

All FIRST participants are expected to meet at least the MUST criteria as laid out in Full Member Form and Liaison Form.

2.2.1. Trust basis, FIRST Representative

Providing information on a trusted basis means essentially that their authenticity (and integrity) is verifiably guaranteed by somebody whose personal ID has been checked and who can prove his/her right to represent the participant and/or its parent organization. For Full Members this MUST be the FIRST Representative, for Liaisons the Liaison him/herself.

The FIRST representative is someone with an operational role in the team, usually the operational incident response team manager.

2.2.2. The "confirmed" status

If the participant then meets all MUSTs within the given timeframe, and the verification of all data provided has proven okay, MC will be notified. The Secretariat will verify that all required information is included on the application web form.

FSS MUST also ensure that for every confirmed participant FSS states how the information involved was originally gathered, compiled and verified (including the identity and status of the authenticator from the participant and the person involved in its role) plus giving possible additional relevant OBJECTIVE remarks. This extra information serves the purpose of enabling other confirmed participants of making their own qualitative assessment regarding the information available about a participant. The essence here is that it is not FSS who decides whether a participant joins the web-of-trust, but that it's the participants themselves that decide about that "confirmed" status means having fulfilled several formal duties making it easy to enter the web-of-trust inmate phase - but it's not a guarantee: trust cannot be bought, it can only be earned.

2.2.3. Maintenance of "confirmed" Status

As sometimes changes will not only impact the participant's staff, or its structure, but also service levels, constituency definition, contact data, the "confirmed" status requires maintenance. The member agrees that:

FSS will maintain change logs and archive email requests, acknowledgments and other communication that results into changes of the participant's information for a period of 3 years in accordance with the FIRST data retention policy.

2.2.4. The "pending" status and termination of FIRST membership

If a participant does verifiably not comply with the above rules, FIRST bylaws and policies and does not react to subsequent FSS and MC requests, stating this fact and given a 3 months deadline, within that period of 3 months or fails to provide due content and authentication, then BD MUST give the participant formal notice that their FIRST membership status will be suspended or revoked within 3 months.

FSS MUST change the status accordingly.

2.2.5. Migration process for existing participants

All FIRST participants whose status is not yet "confirmed" will get a reminder by FSS to submit the mandatory and optional information, as explained in 2.2.3.

2.3. Voluntary Termination

A participant may voluntarily resign from the FIRST at any time. The membership fee is not refundable if a participant resigns from FIRST. FSS will then change the status of the participant to "disabled". A "disabled" participant will have to reapply for Membership as explained in 2.1.3.

2.4. Suspension and Revocation

The Board of Directors will initiate membership revocation steps if any of the following conditions apply:

When a revocation process is begun the participant's access to FIRST rights and facilities may be suspended. Suspension or revocation shall require a 2/3 vote of all members of the Board of Directors, with the exception of a "pending" participant, which membership MUST be terminated after 3 months (cf. 2.2.4).

The participant shall be provided an opportunity for rebuttal prior to revocation.

Lifting suspension and restoration of access to FIRST rights and facilities shall require a 2/3 vote of all members of the Board of Directors.

Participants who have their FIRST membership revoked or suspended for any reason are not entitled to a refund of their membership fee.

Annex 1 - Terms and Definitions