1. http://www.iriss.ieinfo@iriss.ie Creating A CERT at WARP Speed

2. 2004 – The Journey Begins Copyright © 2010 IRISS www.irissie2

3. What’s Missing? 3Copyright © 2010 IRISS www.irissie

4. Situation 4  Knowledge Economy  “Silicon Valley” Europe  Over 97% of Irish Businesses are SME  <50 Employees and Annual Turnover <€10m  Ever Increasing Dependence on ICT  No Independent Source of InfoSec information  Economy At Risk  National Security and CNI at Risk  Lack of Data for Law Enforcement  Soft Back Door to UK CNI Copyright © 2010 IRISS www.irissie

5. Not a Fair Fight ! 5Copyright © 2010 IRISS www.irissie

6. Stakeholders 6Copyright © 2010 IRISS www.irissie

7. Does Ireland Need a CERT? 7Copyright © 2010 IRISS www.irissie

8. 8 Job Complete? Copyright © 2010 IRISS www.irissie

9. 9 Estonia Effect Copyright © 2010 IRISS www.irissie

10. 10 Job Complete? Copyright © 2010 IRISS www.irissie

11. 11 IRISS Is Born Copyright © 2010 IRISS www.irissie

12. Who is IRISS-CERT? 12  Ireland’s First CSIRT (Computer Security Incident Response Team)  Provide Services On Information Security  Services Provided Free of Charge  Not For Profit Organisation Copyright © 2010 IRISS www.irissie

13. Services Offered  Irish Focused Alerts and Warnings  Vulnerability Awareness  Incident Awareness  Sanitised Attack Notifications  Coordination Service  Irish Focused Research  Trends and Metrics  General Awareness  Knowledge Sharing  Informal discussion  Information Sharing & Dissemination 13Copyright © 2010 IRISS www.irissie

14. We Serve  Government Bodies and Agencies  Private Sector Companies  SME Sector  Industry Bodies  Other CERTs 14Copyright © 2010 IRISS www.irissie

15. 15 IRISS Associations Copyright © 2010 IRISS www.irissie

16. 16 Sponsors Copyright © 2010 IRISS www.irissie

17. Reaction 17Copyright © 2010 IRISS www.irissie

18. The Future 18Copyright © 2010 IRISS www.irissie

19. 19 Planning Your CERT Copyright © 2010 IRISS www.irissie

20. 20 Engage With Stakeholders Copyright © 2010 IRISS www.irissie

21. 21 Identify Your Clients Copyright © 2010 IRISS www.irissie

22. 22 Identify Services Copyright © 2010 IRISS www.irissie

23. 23 Establish Your Requirements Copyright © 2010 IRISS www.irissie

24. 24 Identify Tools Copyright © 2010 IRISS www.irissie

25. 25 Get Funding & Support Copyright © 2010 IRISS www.irissie

26. 26 Practise, Practise, Practise Copyright © 2010 IRISS www.irissie

27. 27 Establish the IRT Copyright © 2010 IRISS www.irissie

28. 28 Deliver Your Services Copyright © 2010 IRISS www.irissie

29. 29 Be Prepared Copyright © 2010 IRISS www.irissie

30. 30 Hurdles Copyright © 2010 IRISS www.irissie

31. 31 IRISS Is A WARP Copyright © 2010 IRISS www.irissie

32. 32 What Is A WARP? Copyright © 2010 IRISS www.irissie

33. 33 WARP MSP Copyright © 2010 IRISS www.irissie

34. 34 WARP MSP Copyright © 2010 IRISS www.irissie

35. 35 WARP MSP Copyright © 2010 IRISS www.irissie

36. 36 WARP MSP Copyright © 2010 IRISS www.irissie

37. 37 WARP FWA Copyright © 2010 IRISS www.irissie

38. 38Copyright © 2010 IRISS www.irissie

39. Why A WARP? 39Copyright © 2010 IRISS www.irissie

40. 40 More Resources  ENISA - A step-by-step approach on how to set up a CSIRT http://enisa.europa.eu/cert_guide/downloads/CSIRT_setting_up_guide_EN ISA.pdf  CERT-in-a-box http://www.govcert.nl/render.html?it=69  Handbook for CSIRTs (CERT/CC) http://www.cert.org/archive/pdf/csirt-handbook.pdf  Forming an Incident Response Team http://www.auscert.org.au/render.html?it=2252  NIST Computer Security Incident Handling Guide http://www.securityunit.com/publications/sp800-61.pdf  CSIRT Starter Kit http://www.terena.org/activities/tf-csirt/starter-kit.html Trusted Introducer for CSIRTs in Europe http://www.ti.terena.nl/  Warning Advice and Warning Point (WARP) http://www.warp.gov.uk/ Copyright © 2010 IRISS www.irissie

41. Questions ?