EGI CSIRT:Main Page
The EGI Computer Security and Incident Response Team - EGI CSIRT
EGI CSIRT Mission
The EGI CSIRT covers all aspects of operational security aimed at achieving a 'secure infrastructure' within EGI and relies on site and NGI security contact information maintained in the GOCDB by each NGI. The EGI CSIRT ensures both the coordination with peer grids and with the NGIs and NREN CSIRTs. The EGI CSIRT acts as a forum to combine efforts and resources from the NGIs in different areas, including Grid security monitoring, Security training and dissemination, and improvements in responses to incidents (e.g. security drills). Each NGI will appoint an NGI Security Officer in order to provide the NGI CSIRT function. The resulting group of NGI Security Officers collaborate as part of the EGI CSIRT.
The EGI CSIRT is led and coordinated by the EGI Security Officer, whose role and mission are defined by security policies approved by EGI and the NGIs.
EGI CSIRT Groups
EGI CSIRT security team is organized in following groups. '''Incident Response Task Force (IRTF)''' Handle day to day operational security issues and coordinate Computer-Security-Incident-Response across the EGI infrastructure. '''Security Drills Group (SDG)''' Provide an overview of the various CSIRTs readiness' to react to an computer security incident and challenge the inter CSIRT communcation channels. '''Security Monitoring Group (SMG)''' Develop, deploy and maintain security monitoring tools. '''Training and Dissemination Group (TDG)''' Raise security awareness and improve security for system administrators by providing security training and best practice