Let’s assume we all know that ... (i)
Security is a problem on the Internet
There’s lots of security incidents worldwide
The police only comes in on a small minority of incidents (for several reasons beyond scope here)
There are CSIRTs (general term for a CERT-like team) and ISPs with CSIRT functions dealing with those problems
There are now a few 100 of those around