Alert.png The wiki is deprecated and due to be decommissioned by the end of September 2022.
The content is being migrated to other supports, new updates will be ignored and lost.
If needed you can get in touch with EGI SDIS team using operations @

EGI CSIRT:TDG/Incident-handl

From EGIWiki
Jump to navigation Jump to search

EGI-CSIRT Public wiki EGI-CSIRT Private wiki

EGI-CSIRT Contacts | Back to TDG Main

Incident Handling Site Checklist

A useful checklist for the main actions that should be performed by the site administrators and security teams in case of a security incident.

Incident Handling with RTIR

Incidents and follow up of all the security issues handled by the EGI-CSIRT (including the security service challenges) is done in EGI using a dedicated ticketing system called [RTIR]. End users do not have direct access to the RTIR system, but can exchange messages using e-mail. A comprehensive guide on the usage of RTIR can be found here