1. Networks ∙ Services ∙ People www.geant.org Nicole Harris, GÉANT 45 th TF-CSIRT Meeting, Poznan, Poland Working Group: TI Service Requirements review TF-CSIRT 21 st May 2015

2. Networks ∙ Services ∙ People www.geant.org 2011 Review of TF-CSIRT, Trusted Introducer and TRANSITS. Lead by Kevin Meynell with Serge Droz, Lionel Ferette, Baiba Kaskina, Toomas Lepik, Don Stikvoort & Wilfried Woeber. Set out structure currently used for TF-CSIRT and its related services including the new TF-CSIRT Steering Committee approach. Left open some questions for the future. The future is here! Current TI contract runs until 2017 – time to start thinking about what we want for the future. 2 Background

3. Networks ∙ Services ∙ People www.geant.org To make recommendations for future service and community requirements for the Trusted Introducer service to revalidate the changes introduced via the “Proposal for restructuring TF- CSIRT and the Trusted Introducer Service”. A two-step approach will be undertaken. The first focus of work will be examine the breakdown of services currently provided by the Trusted Introducer service and provide recommendations for future changes. Based on the outcomes of this first stage, the model for service procurement and integration with the TF-CSIRT community will be reviewed. 3 Aim of the Working Group

4. Networks ∙ Services ∙ People www.geant.org To review the complete set of services currently provided by Trusted Introducer against community requirements (Phase One). To revalidate the changes introduced by the “Proposal for restructuring TF- CSIRT and the Trusted Introducer Service” and evaluate the success of the approach (Phase Two). To evaluate the procurement model used for Trusted Introducer and investigate alternative options (Phase Two). Phase One: May 2015 – December 2015. Trusted Introducer service review and future service requirements. Phase Two: December 2015 – May 2016. Revalidation of TF-CSIRT Restructure Model and future procurement requirements. 4 Objectives and Duration

5. Networks ∙ Services ∙ People www.geant.org Phase One: A set of recommendations will be produced by December 2015. Phase Two: A review paper will be produced by May 2016. Whilst the relationship between TRANSITS and TF-CSIRT is in scope for this review, the current structure and organisation of TRANSITS training is out of scope. 5 Deliverables and Scope

6. Networks ∙ Services ∙ People www.geant.org The Working Group will have up to eight members. 6 members from the TF-CSIRT community (that’s you!). A representative from the TF-CSIRT SC as chair. TF-CSIRT Secretary as secretary to the group. TI team and TRANSITS team invited to participate and be involved as appropriate. 6 Members

7. Networks ∙ Services ∙ People www.geant.org Mailing lists and other communication channels (IRC channels). Authentication and PKI processes. Team directory processes. Code of Practice. Assessment models used. Events and event management. Testing processes. Out-of-Band Alerting. Team types / process for team acceptance / objections. Complaints process. Whatever the working group decides is needed. 7 What could be included in phase 1?

8. Networks ∙ Services ∙ People www.geant.org Volunteer please! Please ask questions of any of the Steering Committee. Terms of Reference and call for volunteers will be distributed on the list. 8 What now?

9. Networks ∙ Services ∙ People www.geant.org Thank you and any questions Networks ∙ Services ∙ People www.geant.org © GEANT Limited on behalf of the GN4 Phase 1 project. The research leading to these results has received funding from the European Union’s Horizon 2020 research and innovation programme under Grant Agreement No. 691567 (GN4-1). 9 nicole.harris@geant.org