Hi all,
EGEE has released a revised incident response procedure
(https://edms.cern.ch/file/867454/2/EGEE_Incident_Response_Procedure.pdf) in
August. I therefore revised the GridPP incident handling procedure to bring
it in line with EGEE procedure. The GridPP procedure is very similar to EGEE
one, but with some additional ROC-specific contact detail.
Any comments/feedbacks are welcome. I will replace the old procedure with
the revised one in due course. Note, please do not bookmark the following
links as they are temporary. Once updated, they can be accessed at
http://www.gridpp.ac.uk/security
Revised incident handling procedure
http://www.gridpp.ac.uk/security/working/procedure.html
How to report an incident
http://www.gridpp.ac.uk/security/working/Incident.html
One notable change is the new GridPP csirt mailing list
([log in to unmask]), which is setup for incident
notification/report. GridPP sites do not need to take any action. I have
added all GridPP site csirt emails to the list. Any email to GridPP csirt
mailing list will be automatically broadcasted to all GridPP CSIRTs.
I am the primary contact with regard to this mailing list
(add/remove/configure), with backups from Alessandra and Jeremy. Three of us
are the owner of the list.
Thanks,
Mingchao
--------------------------------------------------
Dr Mingchao Ma, CISSP-ISSAP MCSD
Grid Security Officer
UKI Federation Security Coordinator
e-Science Centre, R89
STFC - Rutherford Appleton Laboratory
Chilton, Didcot, OX11 0QX, UK
Email: [log in to unmask]
Tel: +44 (0) 1235 446515 (office)
--------------------------------------------------
|