Authorization to Use the CERT Mark for U.S. Entities
Computer security incident response teams (CSIRTs) that apply for authorization to use the “CERT” mark in their names can expect to follow the process below:
- CSIRT leadership completes the qualification form. Contact us to request a form.
- CERT staff reviews the qualification form.
- The SEI legal team creates a license agreement and sends it to the CSIRT staff.
- CERT staff review the CSIRT’s website to ensure it meets the Guidelines for Use of “CERT” (described in the next section).
- CERT staff coordinates with the CSIRT staff about any changes that need to be made.
- CSIRT staff signs hard copies of the agreement and returns it to the SEI legal team.
- The signed agreement is presented to Carnegie Mellon University (CMU) for appropriate signatures.
- The agreement is executed after CMU signatures are secured and it is sent to CERT staff who post the CSIRT name.
Guidelines for Using the CERT Mark
Our licensing effort and usage guidelines are designed to help us protect and strengthen the “CERT” brand and thereby reinforce its value for organizations that we license to use it.
Do not define "CERT" as an acronym
Although CERT was once an acronym, “CERT” has been a registered mark owned by Carnegie Mellon University since 1997. Organizations that we have licensed to use the CERT® mark may use it in both their short and long names.
- <Short Name> CERT
- <Long Name> CERT
Do not use “CERT” as a generic term to refer to a category of organizations
Use the term “computer security incident response teams (CSIRTs)” when referring to organizations that perform these kinds of activities. Many organizations incorporate this term in the description of their services. Examples of acceptable use include the following:
- "<Name> is the computer security incident response team (CSIRT) for..."
- "<Name> works closely with other computer security incident response teams (CSIRTs) around the world."