Funet CERT > Services
Tehdyt toimenpiteet

Services

Funet CERT serves only the Funet member organizations unless otherwise specifically agreed. The services are based directly on contolling the aberrations or preventing them. The appointed and trained experts of Funet are on call and serve in case of aberrations. Questions concerning the internal data security of CSC are answerd by the internal security group of CSC.

The services cover either control or prevention of incidents. The specified and trained experts of Funet CERT are on call to serve when incidents occur.

The services of Funet CERT are:

  • The control of incidents
      Controlled treatment of situation and provision of expert help are extremely important in incident handling. Damages caused by incidents must be mitigrated as much as possible.

      When an incident is detected by the Funet organization or any other partner, Funet CERT should immediately be informed.

      In some cases it is enough to inform/alert other partners on handling of the incident, but sometimes a set-off notice is needed to inform about the handling process. After handling the case is closed and statisticsare compiled.

  • Vulnerability detection
      The most important way to prepare for and prevent incidents is detection of vulnerabilities and security holes in the own network and own systems. In order to support this activity Funet CERT provides the specified security correspondents of its member organizations with a possibility to probe for vulnerabilities.
  • Training
      Assistance in incident handling and prevention of incidents need both good, real-time and profound know-how. This know-how can be acquired and supplemented by training.

      Funet CERT arranges tailored security training on a regular basis to the security correspondents and maintainers of its member organizations. Training can cover, for instance, prevention of attacks, e-mail security, maintenence of executive systems or privacy legislation.

  • Seminars
      Besides training courses the security correspondents need to meet to handle actual issues. Funet CERT helps to arrange the security correspondents' seminars.
  • Cooperation
      The security correspondents often work alone or almost alone in their organizations. Working in a trusted network facilitates cross-learning and creating common ways of action.

      Funet CERT supports creating a trusted network and regular communication among the security correspondents. We help in arranging different events, act as a secretary in workshops, and maintain email lists for communications and free discussion.

      From the very beginning, Funet CERT has actively been involved with the cooperatione of the CERT teams.

  • Development projects
      Methods and tools of the information security field are under constant development. Rules and instructions are also being renewed.

      Funet CERT promotes projects, which help the security correspondents of the member organizations to maintain and develop their approaches and tools.

  • International cooperation
      Security incidents are an international phenomenon and they do not obey boundaries between countries. Hense, provisions for incidents have to be based on international cooperation.

      Funet CERT is a member of and a doer both in the European and worldwide CERT cooperation. Funet CERT is an accredited member of TI, is working in the Nordisk Cert Forum and is a member in the international FIRST organization.

  • The authority coordination
      Some serious security information incidents call for authorative operations. If the same incident is simultaneously detected in several organizations, it is necessary to coordinate the cases centrally.
    If necessary, Funet CERT can coordinate cases for instance with CERT-FI or the National Bureau of Investigation.