- new CSIRT technical staff (one to three months of experience)
- experienced CSIRT staff who would like to benchmark their CSIRT processes and skill sets against best practices
- anyone who would like to learn about basic incident handling functions and activities
