|
|
A snowy and secluded location provided the right setting for a training workshop for members of Computer Security Incident Response Teams (CSIRTs) that was organised by TERENA in Uppsala, Sweden on 4-5 March 2010. The workshop was attended by 30 trainees from 24 organisations in 18 European countries, including staff members of CSIRTs in research networking organisations, banks, government institutions and universities.
The trainees completed exercises, heard presentations and joined in discussions about the legal, technical, operational and organisational aspects of CSIRTs, as well as the role of CSIRTs in dealing with vulnerabilities. The training materials were developed originally in the TRANSITS (Training of Network Security Incident Teams Staff) project. For the first time, TERENA included an extensive role-play exercise in the programme of a TRANSITS workshop.
The trainers at the event were Don Stikvoort of S-CURE (Netherlands), Serge Droz of SWITCH-CERT (Switzerland), JP Velders from the University of Amsterdam (Netherlands) and Miroslav Maj of CERT POLSKA (Poland). The latter led a role-play exercise that simulated a real-life incident involving many parties with conflicts of interests, and different mindsets and legal frameworks. By introducing such aspects as vulnerability handling, responsible disclosure and company security management, the role play helped the trainees understand why incident handling is, in many cases, a complex task and what kinds of technical and social skills are required for the job. The exercise is part of a set of training materials developed by CERT POLSKA for ENISA, the European Network and Information Security Agency.
The workshop was organised by TERENA and co-organised and sponsored by ENISA. It also received sponsorship from SUNET, the Swedish national research networking organisation. The event was hosted by SUNET CERT at the University of Uppsala.
Further information
More details about this workshop.
More information about TERENA's CSIRT training, including how to stay updated on future training workshops via the TRANSITS announcements mailing list.
More about TF-CSIRT, TERENA’s task force on Collaboration of Security Incident Response Teams.