This Wiki is available to view at but still under maintenance. PLEASE DO NOT EDIT THE WIKI UNTIL FURTHER NOTICE. We are attempting to restore missing edits which took place between Monday 8 and Thursday 11 April 2019, therefore the site is likely to be taken off line at any time. Updated 20:43 CEST 16 April 2019.
Page tree
Skip to end of metadata
Go to start of metadata

Kaunas, Lithuania - 16-18 April 2019

The WISE Community and SIG-ISM held their first joint meeting back in 2015: https://www.terena.org/activities/ism/wise-ws/ 

Four years later, it was decided that it is time to touch-base again, discuss the work done and plan future collaboration. In the joint sessions, we will talk about the progress of the groups in the past few years, share the results and outcomes and present some challenges that can be overcome together. After that, we will schedule some group sessions where we will work on specific topics, such as:

  • Risk Assessment and Management
  • Security Baselining 
  • Training and Awareness 
  • Crisis Management
  • Information Exchange 
  • ...

Please contact Sigita Jurkynaite (sigita.jurkynaite@geant.org) to add your topic for the agenda - we are looking for presentations or discussion topics (either plenary or break out).

Venue:

Santaka Valley KTU Science,

Technology and Business Centre

K. Baršausko g. 59, Kaunas

Agenda:

Contributions are welcome!


Tuesday - 16 AprilWednesday - 17 AprilThursday - 18 April
09:00







Arrival, Coffee

Arrival, Coffee
09:30The new Trusted CI Framework - Bob Cowles (Trusted CI)

Data Breach Management. GDPR One Year On - where are we today?

Michel Gerdes (DFN-CERT)

10:00Security KPIs and Reporting - Christian Fötinger (University of Applied Sciences Augsburg)Group work reports, Future Collaborations
10:30Coffee BreakCoffee Break
11:00

SIG-ISM meeting

  1. SURFnet Threat Assessment Report 2018 - Bart Bosma (SURFnet)
  2. DeiC updates: ISO 27001-certification project, DeiC/DKCERT GDPR service for Universities, hosting the new Decentral Cyber and Information Security Unit for the Danish telecom sector - Henrik Larsen (DeiC)
  3. RUS-CERT Universitaet Stuttgart introduction - Oliver Goebel (RUS-CERT)

Other community updates

WISE meeting

  1. SCI maturity assessment - Uros Stevanovic (KIT)
  2. Communication in Security Challenges - David Groep (NIKHEF)

  3. Sharing Threat Intelligence - David Crooks (STFC)

Group work reports, Future Collaborations

11:30
12:00Closing, Light Lunch, Departures
12:30Arrival, Registration, Light LunchLunch
13:00
13:30Welcome, Introductions

Group 1:

Information Exchange: Who you gonna call?

  1. Inventory-contact lists. What's next? Planning an exercise based on the Global CEO Forum Security group experience - Linda Cornwall, (STFC) & Alf Moens (SURFnet)
  2. Communication in Security Challenges - David Groep (NIKHEF)
  3. Sharing Threat Intelligence - David Crooks (STFC)



Group 2:

Risk Assessment and Management

Tabletop exercise to test existing Risk Assessment and Management documents. In groups. Led by Šarūnas Grigaliūnas (LITNET)

The goal of Table top exercise is to test existing Risk Assessment and Management documents (https://wiki.geant.org/display/SIGISM/SIG+ISM+white+paper+risk+management) and ISO/IEC 27005:2018 (Information security risk management) standard.

The LITNET CERT provides each group with 3 incident descriptions and details of the IS profile (Academic IS, ELABA, Vulnerable server). A completed document (Service-/Systemprofile) part and a description of the consequences of the incident provided as well.

The task of the group is to fill in the risk assessment part of the document according to the incident. Discussion in groups: Aim to identify and possibly extend a document with social and human factors (ISO/IEC 27005:2018)











14:00
14:30

WISE: activities, working groups, relevant topics

Hannah Short (on behalf of Dave Kelsey, WISE Chair)

15:00Coffee BreakCoffee Break
15:30

Building trust through Interoperable Policies:

SCI - Hannah Short (on behalf of Dave Kelsey)

AARC2 Policy Development Kit - Hannah Short (CERN)

Baseline AUP - Ian Nelson (STFC)

Topic 1:

Training and Awareness

  1. European Cyber Security Month: planning an awareness campaign. Brainstorm session.
  2. Introduction to Risk Management: course materials created and tested by Alf Moens (SURFnet) - feedback session


16:00

GN4-3 WP8 T2: Security Baseline - Nicole Harris (Task Leader, GÉANT)

16:30CLAW: A Crisis Management Exercise that puts NRENs to the test - Charlie van Genuchten (SURFnet)

Topic 2:

Security Baselining

Discussion led by Nicole Harris (GÉANT)

17:00Closing remarksClosing remarks
18:30

Dinner (Restaurant 'Vista Puode')

S. Daukanto g. 23, Kaunas

19:00   Dinner (Restaurant 'Uoksas')

Maironio g. 28, Kaunas

  • No labels