incident response

20 December 2018 at 1:46pm

Incident Response Triage - Eradication, Recovery and Lessons Learned This is part two of a two-part blog set covering an overview of the Incident Response life-cycle. In response to an incident, the next life-cycle steps that follow the containment stage are the remediation steps; eradication of the threat, recovery of systems and lessons learned. This second article focuses on each of these stages, highlighting the important areas to consider within the remaining life-cycle steps.

12 December 2018 at 1:34pm

Explorations in GDPR

Andrew Cormack

Data Protection Regulation

With the GDPR having now been in force for more than six months, my talk at this week's EUNIS workshop looked at some of the less familiar corners of the GDPR map. In particular, since EUNIS provided an international audience, I was looking for opportunities to find common, or at least compatible, approaches across the international endeavours of education and research. Topics covered: What is a University? Network and Information Security; Research; Learning Analytics; Intelligent Campus; and Wellbeing.

19 November 2018 at 2:34pm

Information Sharing and GDPR

Andrew Cormack

incident response

Data Protection Regulation

I've been asked a number of times whether GDPR affects the sharing of information between incident response teams. This slideset discusses how GDPR encourages sharing to improve security, and provides a rule of thumb for deciding when the benefit of sharing justifies the data protection risk.

12 November 2018 at 11:49am

Assessing the DP Impact of Jisc Security Services

Andrew Cormack

Data Protection Regulation

#Jiscsec

incident response

penetration testing

At last week's Jisc Security Conference I presented a talk on how we've assessed a couple of Jisc services (our Security Operations Centre and Penetration Testing Service) from a data protection perspective. The results have reassured us that these services create benefits rather than risks for Jisc, its customers and members, and users of the Janet network. This post links together:

12 November 2018 at 10:41am

Incident Response Triage

Incident Response Triage – identifying, scoping and containing an incident

30 October 2018 at 3:44pm

Incident Statistics for September 2018

These statistics only relate to information collated by Janet CSIRT and do not provide an accurate sample of security activity across the research and education sectors. The figures are frequently more closely correlated to the activity of CSIRT and our detection of events rather than their actual rates of incidence. For example: a successful investigation by researchers into a botnet will cause that month's malware figures to rise even though the malware may have been active in previous months.

30 October 2018 at 3:35pm