2026-09-11T06:16:37-05:00 2025-12-31 582676261 Rogers & Company PLLC 1775 Tysons Boulevard Suite 1200 McLean VA 22102 990 2025-01-01 383943584 Forum of Incident Response and Security Teams Inc FORU 9196546805 2500 Regency Parkway Cary NC 27518 Chris Gibson Executive Director 9196546805 2026-09-11 1 Amanda E Waterhouse P02014004 7038930300 2026-09-11 2025 FIRST Chris Gibson 2500 Regency Parkway Cary NC 27518 7767055 0 X www.first.org X 2014 NC FIRST aspires to bring together incident response and security teams from every country across the world to ensure a safe internet for all. 10 10 3 55 0 0 2274475 3298983 3435694 4414101 24170 28936 3676 25035 5738015 7767055 0 0 0 0 866846 1210246 0 0 0 3752494 5844179 4619340 7054425 1118675 712630 4032449 5053495 1173369 1470161 2859080 3583334 X FIRST aspires to bring together incident response and security teams from every country across the world to ensure a safe internet for all. Effective response is a global task, mirroring the global nature of the internet. Based on a peer to peer network governance model, computer security incident response teams (CSIRTS), product security incident response teams (PSIRTS) and independent security researchers work together to limit the damage of security incidents. This requires a high level of trust; the fuel our members run on. FIRST fosters trust building among member through a variety of activities. Incidents are not confined to one cultural or political corner of the internet, nor do they respect borders or boundaries. FIRST thus promotes inclusiveness, inviting membership from all geographic and cultural regions. 0 0 3829973 3079003 FIRST held its 38th annual conference in Copenhagen, Denmark in June 2025. More than 1,056 security professionals from 103 countries attended sessions on industry best practices, reviews of incident handling, and tools and training, and heard keynotes from industry recognized experts. 1410540 207175 Besides the annual conference, FIRST and its members organize in-person events around the globe which typically have a regional or topical focus. These events cater to a more specialized or local audience. Community driven, these events help participants to force valuable connections which are invaluable during a security incident. Participants discuss security-related technical topics, tools as well as best practice. Many of the events co-host training courses in the area of incident response. In 2025, there were 8 in-person regional events, some with virtual participation. 319959 FIRST provides several online services supporting members in handling security incidents more efficiently. This includes a website containing verified contact information, best practices, and much more information. Operational information is made available through electronic interfaces to be incorporated directly into members' tools. FIRST has over 853 member teams located in 118 countries. Member teams include large vendors, national certs, telcos, research institutes, and many more. FIRST Hosts International Standards like the common vulnerability scoring system (CVSS). 5560472 1 1 0 0 0 0 0 0 0 0 0 0 0 1 0 1 1 0 0 1 1 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 7 0 1 3 1 0 0 0 0 0 0 0 0 0 0 0 0 X 10 10 0 0 0 0 1 1 1 1 0 0 0 1 1 1 1 1 1 1 0 0 NC X Chris Gibson 9196546805 2500 Regency Parkway Cary NC 27518 X Olivier Caleff Chair 10.00 X X 0 0 0 Michael Hausding CFO 10.00 X X 0 0 0 Audrey Mnisi Mireku Director 10.00 X 0 0 0 Carlos Leonardo Director 10.00 X 0 0 0 Serge Droz Director 10.00 X 0 0 0 Nadia Yousef Director 10.00 X 0 0 0 Yukako Uchida Director 10.00 X 0 0 0 Carlos Alvarez Director 10.00 X 0 0 0 Tracy Bills Director 10.00 X 0 0 0 Graciela Martinez Giordano Director 10.00 X 0 0 0 Chris Gibson Executive Director 40.00 X 224902 0 51618 David Schwartsburg Dir - IT and Security 40.00 X 152343 0 35931 Klee Christopher Aiken Dir - Community & Capacity 40.00 X 141612 0 4248 Hadyn Green Principal Comm. Advisor 40.00 X 122677 0 3932 641534 0 95729 4 0 1 0 Velocity Global 1701 Platte Street Denver CO 80205 Salaries and Staffing 1162537 Conference & Publication Service 2753 N Hampden Ct APT 5C Chicago IL 60614 Event Management 527811 NCC Management and Development CO L 60 Queen Sirikit National Conventio Khlong Toei District Bangkok TH 10110 Event Hospitality Services 316414 Tecnodesign Rua Barao 1267 Praca Seca Rio de Janeiro BR Tech Services 185657 NC State University Campus Box 7401 Raleigh NC 276957205 Event Hospitality Services 151362 8 2269391 1029592 3298983 Conference revenue 900099 3079003 3079003 Sponsorship 900099 1127923 1127923 Education programs 900099 207175 207175 4414101 28936 28936 Other Income 459900 25035 25035 25035 7767055 3286178 0 1181894 276520 226211 50309 859303 702963 156340 26730 21867 4863 44591 36478 8113 3102 2538 564 36027 5392 30635 137739 137739 222867 146592 76275 121066 120762 304 497958 380918 117040 525905 357595 168310 456600 382633 73967 2496758 2496758 14996 14996 VAT expense 654344 654344 Program management 517358 517204 154 Materials development 150870 150870 Entertainment and meals 11691 11691 7054425 5560472 1493953 0 681523 103091 1524170 1179912 95968 347866 235095 971113 0 0 0 0 1139243 1184677 356450 1266836 4032449 5053495 162008 490691 1011361 979470 1173369 1470161 X 2712447 3241701 146633 341633 2859080 3583334 4032449 5053495 X 712630 47651 -36027 X 0 1 X 1 0 X 1446243 1231231 1577430 2274475 3298983 9828362 147551 1960937 1338073 3439370 4414101 11300032 329774 329774 1593794 3192168 3245277 5713845 7713084 21458168 0 69143 6547 9320 12329 97339 69143 6547 9320 12329 97339 21360829 24170 28936 53106 24170 28936 53106 25035 25035 1593794 3192168 3245277 5738015 7767055 21536309 0.99190 0.99200 0.00250 0.00160 X Schedule A, Part III, Line 12, Explanation of Other Income: Other Income - 2025 Amount: $ 25,035. RESTRICTED RESTRICTED RESTRICTED RESTRICTED RESTRICTED RESTRICTED RESTRICTED RESTRICTED 2151 2151 0 0 Beneficial ownership in 3rd party funds 1266836 1266836 X 7778679 47651 -36027 11624 7767055 0 7767055 7054425 0 7054425 0 7054425 Part X, Line 2: Management has evaluated FIRST's tax positions and concluded that FIRST's financial statements do not include any uncertain tax positions. Part XI, Line 2d - Other Adjustments: Foreign currency exchange loss -36,027. Europe (Including Iceland & Greenland) Program Services Conferences 3882662 North America Program Services Conferences 38020 Europe (Including Iceland & Greenland) 0 1 Staffing 276520 East Asia and the Pacific 0 2 Staffing 272470 Sub-Saharan Africa 0 2 Staffing 207691 East Asia and the Pacific Membership Dues Europe (Including Iceland & Greenland) Membership Dues Middle East and North Africa Membership Dues North America Membership Dues Russia and Neighboring States Membership Dues South America Membership Dues South Asia Membership Dues Sub-Saharan Africa Membership Dues 0 5 0 0 0 5 4677363 0 4677363 0 0 0 0 0 1 Part I, line 3: The organization uses GAAP to account for activities in foreign regions. X X X 0 0 0 0 0 0 0 0 0 Chris Gibson Executive Director 224902 0 0 0 0 0 6438 0 45180 0 276520 0 0 0 David Schwartsburg Dir - IT and Security 152343 0 0 0 0 0 4976 0 30955 0 188274 0 0 0 Form 990, Part I, Line 5 and Part V, Line 2a The number listed on Form 990 includes one US employee issued a Form W-2. In addition, the organization has five employees located overseas, for a total of six employees. Form 990, Part VI, Section A, line 6 Full members are security incident response teams who assist a defined constituency in preventing and handling security-related incidents; liaison members: Individuals that have a legitimate interest in and value to FIRST. Form 990, Part VI, Section A, line 7a The members of the Forum of Incident Responses and Security Teams, Inc. annually hold an election where members of the Board of Directors are elected to the Board. Members vote for any changes to the bylaws or other governing documents of the Organization. Form 990, Part VI, Section A, line 7b Board of Directors meetings as well as the annual all group meeting are documented in meeting minutes by the Secretariat of the Organization. Form 990, Part VI, Section A, line 8b The organization does not have designated committees. The Board acts on behalf of the Organization. Form 990, Part VI, Section B, line 11b The tax return is reviewed by the CFO and presented to the Board of Directors for review. Form 990, Part VI, Section B, line 12c Each director, officer, and member of a committee with board-delegated powers shall annually sign a statement which affirms that they: A. Have received a copy of the conflicts of interest policy, B. Have read and understands the policy, and C. Have agreed to comply with the policy. If a conflicts arises the Board member will abstain from voting. Outside counsel attends the orientation Board meeting for new members to review the policuy and collect signed agreements. Form 990, Part VI, Section B, line 15a The former Chair and previous CFO reviewed online data regarding salaries of other Executive Director's as well as average payment for leaders in the field of cyber security. The Full Board was involved in the input. The discussions regarding the deliberation and decisions were published to all members. Form 990, Part VI, Section C, line 19 The Organization makes the governing documents, conflicts of interest policy, and financial statements available on its website. Form 990, Part V, Lines 2a/b, Part VII, Part IX Comp & Benefits Reporting: FIRST contracts with Velocity Global as its professional employer organization (PEO). Velocity Global is the employer of record for tax, benefits, and insurance purposes for FIRST's employees. Form 990, Part XI, line 9: Foreign currency exchange loss -36,027.