EGI CSIRT Face To Face

Jun 23, 2025, 9:00 AM → Jun 25, 2025, 5:00 PM Europe/Zurich

2/R-030 (CERN)

Mon, June 23

9:00 AM → 9:15 AM Introduction

9:15 AM → 9:30 AM Training activities

9:30 AM → 10:00 AM Monitoring + Vulnerablility Management

Present the work done during the last months and the status of the project.

10:00 AM → 10:30 AM SVG

10:30 AM → 11:00 AM SSC

11:00 AM → 11:45 AM Comms Challenge January 2025 Results

• Results
• Feedback/learnings
• Decide who will run the following campaign

Speaker: Pau Cutrina Vilalta (CERN)

11:45 AM → 12:00 PM Coffee Break

12:00 PM → 1:00 PM Documents Review

Review recertification process
Review Letter of Intent for remote forensics
Review IRTF infrastructure access rights
Review usage and clarify purpose of csirt SSO group and mailing list

Speaker: Pau Cutrina Vilalta (CERN)

1:00 PM → 2:00 PM Lunch Break

2:00 PM → 3:00 PM Documents Review

Review recertification process
Review Letter of Intent for remote forensics
Review IRTF infrastructure access rights
Review usage and clarify purpose of csirt SSO group and mailing list

Speaker: Pau Cutrina Vilalta (CERN)

3:00 PM → 3:15 PM Coffee Break

3:15 PM → 4:45 PM WLCG initiatives and collaboration with VOs

• Newsletter
• Forensics toolkit
• Hands-on workshop

Speakers: Jose Carlos Luna Duran (CERN), Pau Cutrina Vilalta (CERN)

5:00 PM → 5:30 PM IRTF Handover meeting

6:30 PM → 6:50 PM Group Dinner

Tue, June 24

9:00 AM → 10:30 AM EGI Security Traceability and logging policy

Daniel will present the EOSC logging guidelines as a reference for EGI Guidelines or Policies updates.
"Logging and Monitoring security standard.pdf" from https://commission.europa.eu/document/c102d646-a331-4de6-b6f1-5726ff49e024_en
Barbara will share her experience implementing NIST 2 standards for logging.
After the presentations there will be a discussion to define what can be done to improve the current logging status.

Speaker: Pau Cutrina Vilalta (CERN)

10:30 AM → 11:15 AM TIFR Incident Debrief

Speaker: Pau Cutrina Vilalta (CERN)

11:15 AM → 11:35 AM Coffee Break

11:35 AM → 12:20 PM Yearly Report

Finish the review and use feedback from EGI Webinar

Speaker: Pau Cutrina Vilalta (CERN)

2:15 PM → 3:00 PM Review suspended sites

Speaker: Pau Cutrina Vilalta (CERN)

3:00 PM → 4:00 PM Summary and recap of actions

• Review JIRA tickets done
• Define actions for the next 6 months

Speaker: Pau Cutrina Vilalta (CERN)

4:00 PM → 4:20 PM EGI Checkin User Misbehaviour Detection

Wed, June 25

1:00 PM → 3:00 PM Token-based operations - security discussion

Held by EUGridPMA 63: https://indico.cern.ch/event/1461429/