As a CSIRT team member I find this list accurate and succinct. I would only add that external sources and feeds would help to drive attention to incidents such as those of shadowserver for ISPs.