Page History

Data Breach Management. GDPR One Year On - where are we today?

Michel Gerdes (DFN-CERT)

SIG-ISM meeting

1. SURFnet Threat Assessment Report 2018 - Bart Bosma (SURFnet)
   
2. DeiC updates: ISO 27001-certification project, DeiC/DKCERT GDPR service for Universities, hosting the new Decentral Cyber and Information Security Unit for the Danish telecom sector - Henrik Larsen (DeiC)
3. RUS-CERT Universitaet Stuttgart introduction - Oliver Goebel (RUS-CERT)

Other community updates

WISE meeting

1. High Throughput data transfers (security issues) - Ralph Niederberger (Juelich)
2. SCI maturity assessment - Uros Stevanovic (KIT)
   

3. Communication in Security Challenges - David Groep (NIKHEF)

4. Sharing Threat Intelligence - David Crooks (STFC)

Group work reports, Future Collaborations

Group 1:

Information Exchange: Who you gonna call?

1. Inventory-contact lists. What's next? Planning an exercise based on the Global CEO Forum Security group experience - Linda Cornwall, (STFC) & Alf Moens (SURFnet)
2. Communication in Security Challenges - David Groep (NIKHEF)
3. Sharing Threat Intelligence - David Crooks (STFC)

Group 2:

Risk Assessment and Management

Tabletop exercise to test existing Risk Assessment and Management documents. In groups. Led by Šarūnas Grigaliūnas (LITNET)

The goal of Table top exercise is to test existing Risk Assessment and Management documents (https://wiki.geant.org/display/SIGISM/SIG+ISM+white+paper+risk+management) and ISO/IEC 27005:2018 (Information security risk management) standard.

The LITNET CERT provides each group with 3 incident descriptions and details of the IS profile (Academic IS, ELABA, Vulnerable server). A completed document (Service-/Systemprofile) part and a description of the consequences of the incident provided as well.

The task of the group is to fill in the risk assessment part of the document according to the incident. Discussion in groups: Aim to identify and possibly extend a document with social and human factors (ISO/IEC 27005:2018)

WISE: activities, working groups, relevant topics

Dave Kelsey (WISE Chair)

Building trust through Interoperable Policies:

SCI - Dave Kelsey (WISE Chair)

AARC2 Policy Development Kit - Hannah Short (CERN)

Baseline AUP - Ian Nelson (STFC)

Group 1:

Training and Awareness

1. European Cyber Security Month: planning an awareness campaign. Brainstorm session.
2. Introduction to Risk Management: course materials created and tested by Alf Moens (SURFnet) - feedback session
   
   

Group 2:

GN4-3 WP8 T2: Security Baseline - Nicole Harris (Task Leader, GÉANT)