Since its inception, the CERT® Coordination Center (CERT/CC) has had a strong commitment to transition lessons learned about computer security incident handling to the broader Internet community. The ultimate goal of this transition work is the development of a community equipped to recognize, prevent, and effectively respond to computer security risks and threats against their organizations. To accomplish this transition work, our basic strategy is to develop a body of knowledge that will codify best practices for creating, managing, and sustaining incident management capabilities, based on the 15+ years of experience of the CERT/CC and other national and international teams. We then make this body of knowledge and.