Networks ∙ Services ∙ People Alessandra Scicchitano TF-CSIRT meeting – Tallinn, Estonia SIG-ISM Update 24 th September 2015 SIG-ISM Secretary PDO, GEANT

Networks ∙ Services ∙ People Establish a community of security management professionals Develop, maintain and promote trust framework between NRENs based on international standards Promote the use of international security standards and share best practices for security management within NRENs Discuss and promote issues of information security management of particular interest to NRENs [ 2 The Objectives

Networks ∙ Services ∙ People Alf Moens (SURF) - Chair James Davis (JISC) Rolf Sture Normann (UNINETT) Wayne Routly (GÉANT) I’m sure you know all of them 3 The Steering Committee

Networks ∙ Services ∙ People The SIG is working at the moment on: A White Paper on Information Security Management A Best practice on Risk assessment Both documents are based on the feedback collected during the last meeting in London. [ 4 Current focus

Networks ∙ Services ∙ People The focus of the white paper is mainly on: How to implement security management for an NREN References to existing/running implementations Target Audience: Security professionals and senior information management It can be used as a starting point for setting up security management in an organisation. 5 Information Security Management

Networks ∙ Services ∙ People The focus of the best practice is mainly on: Main risks for an NREN Practical Guide for conducting risk assessment Reference to common used risk assessment methods 6 Risk Management

Networks ∙ Services ∙ People “Wise Information Security for collaborating E-infrastructures” Joint effort of SIG-ISM and SCI Sponsored by EGI, EUDAT, GEANT, HBP and PRACE Be WISE!!!! 7 1 st WISE - 20th/22nd October 2015 Barcelona

Networks ∙ Services ∙ People Thank you and any questions Networks ∙ Services ∙ People 8