The day will cover:
• Software Assurance Assessment (Practical software analysis activity lead by Rob Quick)
• Risk Assessment Walkthrough https://wise-community.org/risk-assessment-template/
• SCI Assessment Walkthrough https://wise-community.org/sci/
Please join the community mail list (see below) and let us know if you’re coming so that we can plan an evening activity.
The WISE (Wise Information Security for collaborating E-infrastructures) community was born as the result of a workshop in October 2015, which was jointly organized by the GÉANT group SIG-ISM (Special Interest Group on Information Security Management) and SCI, the ‘Security for Collaboration among Infrastructures’ group of staff from several large-scale distributed computing infrastructures. All agreed at the workshop that collaboration and trust is the key to successful information security in the world of federated digital infrastructures for research. WISE is an international community with participants spanning North America, Europe, Asia and Australasia.
WISE provides a trusted global framework where security experts can share information on topics such as risk management, experiences about certification processes and threat intelligence. With participants from e-Infrastructures such as EGI, EUDAT, GEANT, PRACE, XSEDE, OSG, NRENs and more, WISE focuses on standards, guidelines and practices, and promotes the protection of critical infrastructure. To date WISE has created four working groups, each tackling different aspects of collaborative security and trust.
The community is currently working on defining a comprehensive security training catalogue (STAA-WG), risk assessment template (RAW-WG), big data best practice guidelines (SBOD-WG) and guidance for assessing an infrastructure against the new version 2 of SCI, the framework established to ease cross-infrastructure information exchange during security incidents (SCIv2-WG).
We invite security representatives from E-Infrastructures to participate. This includes operational security individuals and policy makers.
We propose a full day with the following tentative agenda, combining informational and interactive activities:
Introduction to WISE
What is WISE all about? What are we working on?
We invite members of the WISE community to present their current projects in the security domain.
Software Assurance, hands-on
Practical activity to run assessments on packages distributed by E-Infrastructures, and make assessments. Core software packages will be collected in advance but participants are also encouraged to bring their own samples to assess.
Risk Management, interactive
SCI Self Assessment Walkthrough, interactive
|19:00||Dinner||A table has been reserved on the patio at Crafthouse, 901 N. Glebe Road.|
For those who wish, there is "Trivia" inside from 7:30!