NORDUnet’s Computer Security Incident Response Team (CSIRT) has renewed its certification through TF-CSIRT, the European community of security and incident response teams. The new certificate was presented at the 78th TF-CSIRT meeting in Stockholm, 29 September to 1 October 2026, where Søren Skou, attended on behalf of NORDUnet.
The certification confirms that NORDUnet handles security incidents according to the practices and procedures TF-CSIRT has set for teams across Europe and neighbouring regions.
“Certification is a way of showing our members and peers that incident handling at NORDUnet meets a shared European standard. It is also a good opportunity to review our own procedures and see where we can improve,” says Søren Skou, Senior Network & Security Engineer at NORDUnet.
NORDUnet was first certified in 2015 and has since renewed its certification in 2019, 2023 and now 2026. All five Nordic national research and education networks (NRENs) are also TF-CSIRT members, and their teams work closely together and meet with the NORDUnet CSIRT every month to share experiences and coordinate their work.
NORDUnet operates the Nordic backbone network and its shared services. In practice, university security teams and the NRENs often deal with threats before they reach NORDUnet’s infrastructure, so this close cooperation across the Nordic R&E community is central to how incidents are handled.
“The threat level keeps rising for everyone, and no single team can handle it alone. The trust we build through TF-CSIRT and with our Nordic colleagues is what lets us respond quickly when something happens,” says Søren Skou.
The renewed certification is valid for three years.



