Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

The duties and responsibilities of the Chair include:

  • Managing team membership;
  • Reporting to the the eSG as appropriate;
  • Ensuring team activity and output is documented, approved when needed, and distributed to the appropriate audience;
  • Ensuring that eduGAIN-CSIRT meets the various demands placed on it (← By whom?) to produce and maintain security policies, security procedure and best practice. This will include negotiation with eSG, members of the eduGAIN-CSIRT, and other stakeholders to agree on priorities and timelines, in a manner commensurate with the effort available to the eduGAIN-CSIRT.

Suggest deleting that:

  • Scheduling and running eduGAIN-CSIRT meetings and ensuring that minutes are taken and published.

  • Ensuring all discussion items end with a decision, action or definite outcome.
  • Inviting specialists to attend meetings when required according to the eduGAIN-CSIRT agenda.
  • Acting as general point of contact for eduGAIN-CSIRT.
  • Ensuring that documents produced are presented for approval and adoption and that once approved these are published and made available.

  • Ensuring that eduGAIN-CSIRT meets the various demands placed on it to produce and maintain policy, procedure and best practice. This will include negotiation with eSG, members of the CSIRT, and other stakeholders to agree priorities and timelines commensurate with the effort available to the Group.

  • Reporting to the the eSG as appropriate.

The duties and responsibilities of the members include:

  • Participating to the  eduGAIN-CSIRT meetings. (← I would suggest deleting and keeping "duties and responsibilities" at a much higher level here and for the chair)
  • Actively contributing to the mission of the eduGAIN-CSIRT;
  • Providing expertise and guidance to the best of their knowledge
  • Respecting TLP restrictions (https://www.first.org/tlp) and appropriate confidentiality requirements;
  • Respecting the privacy of any party involved in security incidents and as part of daily security operations;

Term of Office

The Term of Office is unlimited.

...