The services cover either control or prevention of incidents. The specified and trained experts of Funet CERT are on call to serve when incidents occur.
The services of Funet CERT are:
- The control of incidents
-
Controlled treatment of situation and provision of expert help are
extremely important in incident handling.
Damages caused by incidents must be mitigrated as much
as possible.
When an incident is detected by the Funet organization or any other partner, Funet CERT should immediately be informed.
In some cases it is enough to inform/alert other partners on handling of the incident, but sometimes a set-off notice is needed to inform about the handling process. After handling the case is closed and statisticsare compiled.
- Vulnerability detection
-
The most important way to prepare for and prevent incidents is
detection of vulnerabilities and security holes in the own network
and own systems.
In order to support this activity Funet CERT provides
the specified security correspondents of its member organizations
with a possibility to probe for vulnerabilities.
- Training
-
Assistance in incident handling and prevention of incidents need
both good, real-time and profound know-how. This know-how
can be acquired and supplemented by training.
Funet CERT arranges tailored security training on a regular basis to the security correspondents and maintainers of its member organizations. Training can cover, for instance, prevention of attacks, e-mail security, maintenence of executive systems or privacy legislation.
- Seminars
-
Besides training courses the security correspondents need to meet
to handle actual issues.
Funet CERT helps to arrange the security correspondents' seminars.
- Cooperation
-
The security correspondents often work alone or almost alone
in their organizations. Working in a trusted network facilitates
cross-learning and creating common ways of action.
Funet CERT supports creating a trusted network and regular communication among the security correspondents. We help in arranging different events, act as a secretary in workshops, and maintain email lists for communications and free discussion.
From the very beginning, Funet CERT has actively been involved with the cooperatione of the CERT teams.
- Development projects
-
Methods and tools of the information security field are under constant
development. Rules and instructions are also being renewed.
Funet CERT promotes projects, which help the security correspondents of the member organizations to maintain and develop their approaches and tools.
- International cooperation
-
Security incidents are an international phenomenon and they do not
obey boundaries between countries. Hense, provisions for incidents
have to be based on international cooperation.
Funet CERT is a member of and a doer both in the European and worldwide CERT cooperation. Funet CERT is an accredited member of TI, is working in the Nordisk Cert Forum and is a member in the international FIRST organization.
- The authority coordination
-
Some serious security information incidents call for authorative operations.
If the same incident is simultaneously detected in several organizations,
it is necessary to coordinate the cases centrally.