UPDATE ......From Tuesday 8 April 2025 we have changed the way that Single Sign-on works on this wiki. Please see here for more information:
Update
eduGAIN Participants shall define a security contact for the federation that will act a
The security contact shall respect the following base requirements:
- It is strongly recommended to use a dedicated email address for the security contact.
- Where possible, use the contact of the NREN's security function (local CERT/CSIRT).
- Refer to the eduGAIN CSIRT <abuse@edugain.org>, which is the established security contact for the eduGAIN Service, for federated security incident notification and coordination.
Respond to requests for assistance with a security incident from the eduGAIN CSIRT or other eduGAIN Participants in a timely manner. The recommended response time is half business day.
Respect the Traffic Light Protocol [TLP] information disclosure policy and use it during incident response communications (ref. https://www.first.org/tlp)