As a National CERT:
Incident Response
- IT Security Announcement and technology watch
- IT Security announcement through public media, brochures, banners, posters, magazine, newspaper.
- IT Security Incident Coordination
- Internal coordination which involving collecting of information.
- IT Security Vulnerability Coordination
- Notify other mitigation strategy, by distributing advisories or alerts.
- Artifact / Evidence Response Coordination
- Internal coordination involving sharing and synthesizing analysis result and response strategy.
- Maintaining public or constituent archive of known artifacts.
As a Government CERT and the Government Security Services Provider:
Incident Response
- Dissemination of Early Alerts and Warnings
- Information of intruder attack, vulnerability, intrusion alert, computer virus, or hoax and provide recommendation.
- IT Security Announcement and Technology Watch
- IT Security announcement through, brochures, banners, posters, and also technology watch.
- Security Incident Coordination
- Internal coordination involving collecting of information.
- Coordination and collaboration with organization’s legal counsel, human resources, or public relation departments.
- IT Security Incident Analysis and Response
- Examination of all information, analysis and identify the incident
- Initiate tracking and tracing activities for further investigation.
- IT Security Incident Response Support
- Assist and guide victim of recovering from incidents via phone, email, fax, or documentation.
- IT Security Vulnerability Coordination
- Provides notification to various parts of constituencies, about vulnerability and mitigate the situation.
- Collaboration with other security experts, hardware and anti-virus vendor.
- IT Security Vulnerability Handling, Analysis and Response
- Technical analysis and examination of vulnerabilities in hardware and software.
- Mitigate and repair vulnerability.
- Notify other mitigation strategy, by distributing advisories or alerts.
- Artifact / Evidence Response Coordination
- Internal coordination involving sharing and synthesizing analysis result and response strategy.
- Maintaining public or constituent archive of known artifacts.
- Artifact / Evidence Handling, Analysis and Response
- Perform technical examination and analysis of any artifact found.
- Determines appropriate actions to detect and remove artifacts from a system.
- Computer Forensic – Forensic Analysis Services
- Evidence Collecting and handling
- Examination of :-
- Personal Computer Systems
- Mobile Phones and Devices
- Network / Corporate Environments
- External Media
- Intranet/ Internet and Email Infrastructure
........................................................................................................................................................................
.