Operational Security Procedures: https://documents.egi.eu/public/ShowDocument?docid=47.
If requesting a new role in the GOCDB, as a precaution please email Jeremy (there is no pending request alert in GOCDB).
PMB statement on security (following last dteam+sites meeting comments):
"The GridPP PMB encourages sites to make decisions on security related matters in accordance with their own site's security policy and the common wLCG/EGI/GridPP security policy (reference EGI document currently awaiting EGI PMB sign-off), taking into account the advice received from their own site security team, the information provided by the GridPP security team, and in consultation with other sites. The PMB acknowledges that security responses may differ from site-to-site, reflecting different institutional policies, grid architectures, configurations and installed packages. Ultimately, each site must weigh the risk vs benefit of continuing to provide a service. The risk analysis must consider the severity of the threat; the time-frame of the exposure; the risk that lack of response would cause to other sites, services and the infrastructure; and the ability of a site to monitor and respond. GridPP encourages sites to consider each incident objectively and does not wish to influence, in either direction, the outcome of that consideration. That is, GridPP does not encourage sites to take on a higher level of risk than they feel comfortable with in order to preserve service, nor does GridPP encourage sites to shutdown service prematurely to eliminate small risks."
- For those who missed the HEPSYSMAN meeting the talks are mostly now uploaded to: http://indico.cern.ch/conferenceDisplay.py?confId=114368.