Let’s assume we all know that ... (ii)
These few 100 CSIRTs have a rough time to find the right CSIRT to tackle ...
... and then still they often don’t really know whom they are talking to
So the CSIRT infrastructure is a major problem and becoming worse
There is no worldwide solution for this yet (FIRST is not, or not yet, ISOC etc are not really involved)