Page History

...

1. It is strongly recommended to use a dedicated email address for the security contact. 
2. Where possible, use the NREN's security function (local CERT/CSIRT). We will also accept specific security capability for the federation service, if the organization has a proper procedure to deal with the communication.
3. In case of federated security incident and coordination, notify the the [eduGAIN-CSIRT]  as required by the eduGAIN Incident Security Response Handbook [eduGAIN-SIRH]. 

4. Respond to requests for assistance with a security incident from the eduGAIN CSIRT or other eduGAIN Participants in a timely manner. The recommended response time is half business day.

5. Respect the Traffic Light Protocol [TLP] information disclosure policy and use it during incident response communications (ref. https://www.first.org/tlp).

6. The contact needs to expect that the eduGAIN CSIRT runs periodic communication checks which need to be handled as any other incident response communication.

...