GSi eZine: an email newsletter from OGCbuying.solutions

Return to front cover

How GovCertUK can assist your organisation during a Network Security Incident

CESG, as the National Technical Authority for Information Assurance, has the lead responsibility within Government for providing Information Assurance (IA) advice to public sector organisations. GovCertUK is responsible for Computer Security Incident Response within UK Government, and provides an emergency response capability to organisations that may require technical support and advice during periods of electronic attack or when experiencing other network security incidents.

GovCertUK launched on the 1st February 2007 and has gradually increased its visibility and capability during this period. They have assisted with the investigation into a number of incidents on behalf of public sector organisations, and also research vulnerabilities that are reported within open-sources. This has led them to notifying, for example, over 100 organisations about cross-site scripting vulnerabilities that exist within their websites, issuing signatures for use in Intrusion Detection Systems across Government, providing guidance on the importance to Government of new software patches, running training days...and more besides.

If a public sector organisation has a network security issue, they can contact GovCertUK for assistance. They will endeavour to understand the problem, and assist with a return to normal operations. They can provide remote and onsite assistance for serious or widespread incidents and are supported by a team of experts within CESG technical areas.

The GSi Code of Connection states that customers must report all incidents to GovCertUK to ensure the whole of the public sector can benefit from any lessons learnt. Incidents should be reported by the Departmental Security Officer or equivalent (or an individual authorised by the DSO). They recommend that you telephone number 01242 709311 for an initial response, which should be followed up with an email to incidents@govcertuk.gov.uk using the incident template found on their website. Please refer to their website for full details on how to report an incident http://www.govcertuk.gov.uk.

Back to top

© OGCbuying.solutions 2008

Printable version

Rate this article

This article has been rated by 1 users, with an average of 3.0.

In this edition