networks ∙ services ∙ people nicole harris, gÉant 45 th tf-csirt meeting, poznan, poland...
TRANSCRIPT
Networks Services People ∙ ∙ www.geant.org
Nicole Harris, GÉANT
45th TF-CSIRT Meeting, Poznan, Poland
Working Group: TI Service Requirements reviewTF-CSIRT
21st May 2015
Networks Services People ∙ ∙ www.geant.org
2
• 2011 Review of TF-CSIRT, Trusted Introducer and TRANSITS.
• Lead by Kevin Meynell with Serge Droz, Lionel Ferette, Baiba Kaskina, Toomas Lepik, Don Stikvoort & Wilfried Woeber.
• Set out structure currently used for TF-CSIRT and its related services including the new TF-CSIRT Steering Committee approach.
• Left open some questions for the future. The future is here!
• Current TI contract runs until 2017 – time to start thinking about what we want for the future.
Background
Networks Services People ∙ ∙ www.geant.org
3
• To make recommendations for future service and community requirements for the Trusted Introducer service
• to revalidate the changes introduced via the “Proposal for restructuring TF-CSIRT and the Trusted Introducer Service”.
• A two-step approach will be undertaken.
• The first focus of work will be examine the breakdown of services currently provided by the Trusted Introducer service and provide recommendations for future changes.
• Based on the outcomes of this first stage, the model for service procurement and integration with the TF-CSIRT community will be reviewed.
Aim of the Working Group
Networks Services People ∙ ∙ www.geant.org
4
• To review the complete set of services currently provided by Trusted Introducer against community requirements (Phase One).
• To revalidate the changes introduced by the “Proposal for restructuring TF-CSIRT and the Trusted Introducer Service” and evaluate the success of the approach (Phase Two).
• To evaluate the procurement model used for Trusted Introducer and investigate alternative options (Phase Two).
• Phase One: May 2015 – December 2015. Trusted Introducer service review and future service requirements.
• Phase Two: December 2015 – May 2016. Revalidation of TF-CSIRT Restructure Model and future procurement requirements.
Objectives and Duration
Networks Services People ∙ ∙ www.geant.org
5
• Phase One: • A set of recommendations will be produced by December 2015.
• Phase Two: • A review paper will be produced by May 2016.
Whilst the relationship between TRANSITS and TF-CSIRT is in scope for this review, the current structure and organisation of TRANSITS training is out of scope.
Deliverables and Scope
Networks Services People ∙ ∙ www.geant.org
6
• The Working Group will have up to eight members.
• 6 members from the TF-CSIRT community (that’s you!). • A representative from the TF-CSIRT SC as chair. • TF-CSIRT Secretary as secretary to the group.
• TI team and TRANSITS team invited to participate and be involved as appropriate.
Members
Networks Services People ∙ ∙ www.geant.org
7
• Mailing lists and other communication channels (IRC channels).
• Authentication and PKI processes.
• Team directory processes.
• Code of Practice.
• Assessment models used.
• Events and event management.
• Testing processes.
• Out-of-Band Alerting.
• Team types / process for team acceptance / objections.
• Complaints process.
• Whatever the working group decides is needed.
What could be included in phase 1?
Networks Services People ∙ ∙ www.geant.org
8
• Volunteer please!
• Please ask questions of any of the Steering Committee.
• Terms of Reference and call for volunteers will be distributed on the list.
What now?
Networks Services People ∙ ∙ www.geant.org
9
Thank you and any questions
Networks Services People ∙ ∙www.geant.org
© GEANT Limited on behalf of the GN4 Phase 1 project.The research leading to these results has received funding from the European Union’s Horizon 2020 research and innovation programme under Grant Agreement No. 691567 (GN4-1).