DKCERT

The Trusted Introducer Service forms the trusted backbone of infrastructure services and serves as clearinghouse for security and incident response teams. It lists well known teams and accredits as well as certifies teams according to their demonstrated and checked level of maturity.

Trusted Introducer is a service under the TF-CSIRT.

DKCERT, the security incident handling organization of DeiC is accredited by Trusted Introducer since 2002.

TF-CSIRT (Task Force Computer Security Incident Response Teams) is a task force under the European research and education networking organization GÉANT. Its members are organizations handling security incidents.

TF-CSIRT allows members to meet with other similar organizations and discuss topics of common interest. TF-CSIRT also arranges training and promotes the use of common standards and procedures for handling security incidents.

DeiC is represented in TF-CSIRT via DKCERT.

FIRST (Forum for Incident Response and Security Teams) is a global organization for teams handling security incidents. FIRST facilitates knowledge sharing via networks, conferences, seminars and workshops.

DeiC is represented in FIRST via DKCERT.

• FIRST

Members

• CISO Ole Boulund Knudsen, Aarhus University (recommended by the CISO Forum), Chairman
• CIO Mads Sinkjær Kjærgaard, Roskilde University (recommended by the CIO Forum of the Danish Rectors' Conference)
• Network administrator Lasse Birnbaum Jensen, University of Southern Denmark (recommended by the Technical Reference Group for Network Infrastructure)
• CISO Poul Halkjær Nielsen, Copenhagen University (recommended by the CISO Forum)
• Vacant (a representative from another partner)

Newsletter

Every Monday DKCERT issues a newsletter to anyone interested in staying informed about information security and threats against their IT systems. 

The newsletter informs about the latest news in the field of IT security, including security risks and illegal activities in the research network. The newsletter includes the following topics: 

DKCERT offers as a free service to scan it systems and applications exposed to the internet for vulnerabilities. The purpose is to identity existing vulnerabilities that allow external intrusion via the internet. 

The result of the vulnerability scanning is documented in a report. It acts as a management tool which is presented to the system owner. The report gives the system operator an overview of which vulnerabilities that need to be corrected to secure the network of the institution.

Registration for scanning is done by contacting DKCERT.

DKCERT receives reports from persons who have been exposed to a security incident related to Forskningsnettet (the Danish Research Network). It may be attacks on computers connected to the network or attacks from the network aimed at others. The role of DKCERT is of an intermediary and advisory nature.

The Incident Response service includes direct technical support to handle the security incident. DKCERT proposes solutions to the problems and warns others who are at risk of a similar incident. This takes into account the stakeholders' wish for anonymity and confidentiality.