Services
Funet CERT serves only the Funet member organizations unless otherwise specifically agreed. Services are either based on mitigating incidents or preventing them, our appointed and trained experts of Funet are on call to serve when incidents occur. Questions concerning the internal data security of CSC are handled by the internal security group of CSC.
Incident management
Properly managed handling of situations and provision of expert help are extremely important in incident handling. Damages caused by incidents must be mitigated as much as possible.
When an incident is detected by the Funet organization or any other partner, Funet CERT should immediately be informed.
In some cases it is enough to inform/alert other partners on handling of the incident, but sometimes a set-off notice is needed to inform about the handling process. After handling the case is closed and statistics are compiled.
Vulnerability detection
The most important way to prepare for and prevent incidents is detection of vulnerabilities and security holes in your own networks and systems. To support this activity Funet CERT provides specified security correspondents of its member organizations a vilnerability scanning service for their own networks.
Training
Assistance in incident handling and prevention of incidents need good, up to date and profound know-how. This can be acquired and supplemented by training.
Funet CERT arranges tailored security training on a regular basis to the security correspondents and maintainers of its member organizations. Training can cover, for instance, prevention of attacks, e-mail security, maintenence of executive systems or privacy legislation.
Seminars
Besides training courses the security correspondents need to meet to handle actual issues. Funet CERT helps to arrange the security correspondents' seminars.
Cooperation
Security personnel often work alone or almost alone in their organizations. Working in a trusted network facilitates cross-learning and creating common ways of action.
Funet CERT supports creating a trusted network and regular communication among the security correspondents. We help in arranging different events, act as a secretary in workshops, and maintain email lists for communications and free discussion.
From the very beginning, Funet CERT has actively been involved with cooperation of CERT teams.
Development projects
Methods and tools in the information security field are under constant development. Rules and instructions are also being renewed.
Funet CERT promotes projects, which help the security correspondents of the member organizations to maintain and develop their approaches and tools.
International cooperation
Security incidents are an international phenomenon and they do not obey boundaries between countries. Hence, incident response has to be based on international cooperation.
Funet CERT is an active member both in the European and worldwide CERT cooperation. Funet CERT is an certified member of TI, is working in the Nordic NREN CERT Forum and is a member in the international FIRST organization.
The authority coordination
Some serious security incidents require operations with government agencies. If the same incident is simultaneously detected in several organizations, it is necessary to coordinate the cases centrally. If necessary, Funet CERT can coordinate cases for instance with NCSC-FI or the National Bureau of Investigation.
CSC - IT Center for Science Ltd. © 2021