...
- Risk Assessment and Management
- Security Baselining
- Training and Awareness
- Crisis Management
- Information Exchange
- ...
Please contact Sigita Jurkynaite (sigita.jurkynaite@geant.org) to add your topic for the agenda - we are looking for presentations or discussion topics (either plenary or break out).
Venue:
Santaka Valley KTU Science,
...
K. Baršausko g. 59, Kaunas
Agenda:
Contributions are welcome!
| Tuesday - 16 April | Wednesday - 17 April | Thursday - 18 April | ||||
|---|---|---|---|---|---|---|
| 09: | ||||||
| 15 | Arrival | ||||
| Arrival | ||||
| 09:30 | The new Trusted CI Framework - (Bob Cowles, Trusted CI | |||
| ) | Data Breach Management. GDPR One Year On - where are we today? Michel Gerdes (DFN-CERT) | ||||
| 10:00 | Security KPIs and Reporting - Christian Fötinger (University of Applied Sciences Augsburg) Additional documents: Metrics and Key Performance Indicators for Information Security Reports of Universities - Matthias Mödinger (Master Thesis) Information Security Report template: A universal guideline for the implementation of a specific ISMS for all Bavarian universities and universities of applied sciences using the example of the University of Applied Sciences Augsburg - Sabine Schnitzler (Master Thesis) | Group work reports, Future Collaborations | |||
| 10:30 | Coffee Break | Coffee Break | |||
| 11:00 | SIG-ISM meeting
| WISE meeting
| Group work reports, Future Collaborations | ||
| 11:30 | Meeting evaluation | ||||
| 12:00 | Closing, Light Lunch, Departures | ||||
| 12:30 | Arrival, Registration, Light Lunch | Lunch | |||
|---|---|---|---|---|---|
| 13:00 | |||||
| 13:30 | Welcome, Introductions | Group 1: Information Exchange: Who you gonna call?
| |||
Security Baselining
| Group 2: Risk Assessment and Management Tabletop exercise to test existing Risk Assessment and Management documents. In groups. Led by Šarūnas Grigaliūnas (LITNET) The goal of Table top exercise is to test existing Risk Assessment and Management documents (https://wiki.geant.org/display/SIGISM/SIG+ISM+white+paper+risk+management) and ISO/IEC 27005:2018 (Information security risk management) standard. The LITNET CERT provides each group with 3 incident descriptions and details of the IS profile (Academic IS, ELABA, Vulnerable server). A completed document (Service-/Systemprofile) part and a description of the consequences of the incident provided as well. The task of the group is to fill in the risk assessment part of the document according to the incident. Discussion in groups: Aim to identify and possibly extend a document with social and human factors (ISO/IEC 27005:2018) | |||
| 14:00 | ||||
- Alf Moens |
(SIG-ISM Chair |
) | |
| 14:30 | WISE: activities, working groups, relevant topics Hannah Short (on behalf of Dave Kelsey |
, WISE Chair |
) | |||||
| 15:00 | Coffee Break | Coffee Break | |||
| 15:30 | Building trust through Interoperable Policies: SCI - | ||||
Hannah Short (on behalf of Dave Kelsey |
) AARC2 Policy Development Kit - Hannah Short (CERN) Baseline AUP - Ian Nelson (STFC) | Topic 1: Training and Awareness | |||
Let's compare the notes - what have we done so far?
Lists of available materials - how can we move on to the best practises and avoid bad practises?
European Cyber Security Month: planning an awareness campaign. Brainstorm session. Introduction to Risk Management: course materials created and tested by Alf Moens (SURFnet) - feedback session |
Group 2:
Information Exchange: Who you gonna call?
Communication in Security
Sharing information about incidents
Inventory lists - what's next?| 16:00 | |||
- Nicole Harris |
(Task Leader, GÉANT) | |
| 16:30 | CLAW: A Crisis Management Exercise that puts NRENs to the test |
| - Charlie van Genuchten |
| (SURFnet) | Topic 2: Security Baselining Discussion led by Nicole Harris (GÉANT). | ||||
| 17:00 | Closing remarks | Closing remarks | |||
| 18:30 | Dinner at Restaurant Vista Puode | 19:00 Dinner (Restaurant 'Uoksas') | |||