Name: Joint CSIRT meeting
Start: 2025-02-03T09:00:00+01:00
End: 2025-02-05T17:00:00+01:00
Location: CERN

Monday 3 February
- 1
  
  Introduction
- 2
  
  Training activities
- 3
  
  Monitoring + Vulnerablility Management
  
  Present the work done during the last months and the status of the project.
- 4
  
  SVG
- 5
  
  SSC
- 6
  Comms Challenge January 2025 Results
  - Results
  - Feedback/learnings
  - Decide who will run the following campaign
  Speaker: Pau Cutrina Vilalta (CERN)
- 11:45
  
  Coffee Break
- 7
  
  Documents Review
  
  Review recertification process
  Review Letter of Intent for remote forensics
  Review IRTF infrastructure access rights
  Review usage and clarify purpose of csirt SSO group and mailing list
  
  Speaker: Pau Cutrina Vilalta (CERN)
- 13:00
  
  Lunch Break
- 8
  
  Documents Review
  
  Review recertification process
  Review Letter of Intent for remote forensics
  Review IRTF infrastructure access rights
  Review usage and clarify purpose of csirt SSO group and mailing list
  
  Speaker: Pau Cutrina Vilalta (CERN)
- 15:00
  
  Coffee Break
- 9
  WLCG initiatives and collaboration with VOs
  - Newsletter
  - Forensics toolkit
  - Hands-on workshop
  Speakers: Jose Carlos Luna Duran (CERN), Pau Cutrina Vilalta (CERN)
- 10
  
  IRTF Handover meeting
- 18:30
  
  Group Dinner
Tuesday 4 February
- 11
  
  EGI Security Traceability and logging policy
  
  Daniel will present the EOSC logging guidelines as a reference for EGI Guidelines or Policies updates.
  "Logging and Monitoring security standard.pdf" from https://commission.europa.eu/document/c102d646-a331-4de6-b6f1-5726ff49e024_en
  Barbara will share her experience implementing NIST 2 standards for logging.
  After the presentations there will be a discussion to define what can be done to improve the current logging status.
  
  Speaker: Pau Cutrina Vilalta (CERN)
- 12
  
  TIFR Incident Debrief
  
  Speaker: Pau Cutrina Vilalta (CERN)
- 11:15
  
  Coffee Break
- 13
  
  Yearly Report
  
  Finish the review and use feedback from EGI Webinar
  
  Speaker: Pau Cutrina Vilalta (CERN)
- 14
  
  Review suspended sites
  
  Speaker: Pau Cutrina Vilalta (CERN)
- 15
  Summary and recap of actions
  - Review JIRA tickets done
  - Define actions for the next 6 months
  Speaker: Pau Cutrina Vilalta (CERN)
- 16
  
  EGI Checkin User Misbehaviour Detection
Wednesday 5 February
- 17
  
  Token-based operations - security discussion
  
  Held by EUGridPMA 63: https://indico.cern.ch/event/1461429/

Joint CSIRT meeting

2/R-030

CERN