edugain-discuss AT lists.geant.org

Subject: An open discussion list for topics related to the eduGAIN interfederation service.

List archive

[eduGAIN-discuss] Consultation: eduGAIN Security Incident Response Handbook

From: Nicole Harris <nicole.harris AT geant.org>
To: "refeds AT lists.refeds.org" <refeds AT lists.refeds.org>, "consultations AT lists.refeds.org" <consultations AT lists.refeds.org>, "edugain-discuss AT lists.geant.org" <edugain-discuss AT lists.geant.org>
Cc: "sirtfi AT lists.refeds.org" <sirtfi AT lists.refeds.org>
Subject: [eduGAIN-discuss] Consultation: eduGAIN Security Incident Response Handbook
Date: Mon, 20 Jul 2020 11:11:04 +0000
Accept-language: en-GB, en-US
Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=geant.org; dmarc=pass action=none header.from=geant.org; dkim=pass header.d=geant.org; arc=none
Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=NWVcWncQiE9ZU7TbFlX0bEUXW6yUi/mrKmVqEALjXHg=; b=YVP0mCwGQk9zHc6D9VOdi2vya4+JIpLaGGcpqDs4GKViPSyRlIJI68jjf7z28CyL+mLtjaSOvvwcb8vN7w64t7jcfYf1QdBREeZ3PtFxXwkEK7luRxoplqDBI843HkScgoEUXcDttvF7k3f+xpEutjM0soORnRxTjM38Oggw51e98zLyANSIW07wafZ9gSpN8YrTgPODObotj3y/0jruxHk1E7xiLVGdLArQmCRWf/Hk45oMTPhHffbT/s455n1zEXyktxz108HzuC+OfelT1rCYMLux+n5p+FFbhnqNXbuKVTXFKz3b+a5O3jJTQAIh+plLfkyGD2nsADeK6tDuIw==
Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=SQS+eGi/KknDmiquf73CHqEZr3ox0ke6usuag2moiIEAWVJCptyI+RviC0JnTCsX9MpOTJM5XCOIOviXVph4a2dZQCHh3nwt5qJ98LdBjdYr6OHlGq9djmLRV9j7dWgUn7wkXQTgRKj1Hm6cKLRCmlMpW42iYlPULBWYvl2ZC0QI1dPF24lV7xklKBY637SiiWdmHxjBP2vHv8uC87L7vQGrg38SrouQdWhrG7G6TGD923nOc3ptZDxzYza3B0MzMen8HYBCpkwqx1yGxk55pJ2F4ZjXfyk6wbcrSm3N9/raufTqJxQvywOk8OkdL+4dl2SOPnZqvirDBGn9L9jbYw==
Authentication-results: lists.refeds.org; dkim=none (message not signed) header.d=none;lists.refeds.org; dmarc=none action=none header.from=geant.org;

Dear All

The REFEDS Sirtfi Working Group, in conjunction with the eduGAIN Security Team, have prepared a Security Incident Response Handbook for the eduGAIN service. The document defines the roles and responsibilities of each party taking part in the Security Incident Response process that is when a Federation Participant suspects a security incident affects its resources and has reason to believe that Federation Participants outside its origin federation may be affected. The groups are now seeking feedback on this document.

Please note that while the REFEDS Consultation process is being used, the full formal consultation process for REFEDS will not be applied as this document is specific to the eduGAIN service. Comments will be processed and considered by the Sirtfi Working Group but ultimately acceptance of the document will lie with eduGAIN and not the REFEDS Steering Committee. This consulation will be shared on both the REFEDS and eduGAIN lists.

Full details of the consultation can be found at: https://wiki.refeds.org/display/CON/Consultation%3A+eduGAIN+Security+Incident+Response+Handbook. This consultation is open from: Monday 20th July 2020 at 13:00 CEST to Friday 11th September at 17:00 CEST.

With thanks

Nicole

--
Nicole Harris
Head of Trust and Identity Operations
GÉANT
T: +31 (0) 20 530 4488
M: +31 (0) 646 105395
Skype: harrisnv

PGP key Fingerprint: 4017 2E40 13D4 9DA7 68E1 8ADB 3F11 9CDB FC48 6216

Networks • Services • People

Learn more at www.geant.org

GÉANT Vereniging (Association) is registered with the Chamber of Commerce in Amsterdam with registration number 40535155 and operates in the UK as a branch of GÉANT Vereniging. Registered office: Hoekenrode 3, 1102BR Amsterdam, The Netherlands. UK branch address: City House, 126 -130 Hills Road, Cambridge CB2 1PQ, UK.

[eduGAIN-discuss] Consultation: eduGAIN Security Incident Response Handbook, Nicole Harris, 07/20/2020