From 26212a8e70aff40d645ebf3466e93b3a8d11e7a3 Mon Sep 17 00:00:00 2001 From: nckroy Date: Mon, 17 Feb 2020 14:30:03 -0700 Subject: [PATCH] Fixed language per Shannon --- docs/index.html | 9 +++------ main.adoc | 4 +--- ...c-security-incident-handling-framework.pdf | Bin 224338 -> 223433 bytes 3 files changed, 4 insertions(+), 9 deletions(-) diff --git a/docs/index.html b/docs/index.html index 9768085..808fbe9 100644 --- a/docs/index.html +++ b/docs/index.html @@ -555,11 +555,11 @@

Change Log

Nicholas Roy

-

Draft

Added information about PGP key usage

February 17, 2020

1.6

+

Nicholas Roy

@@ -646,10 +646,7 @@

Initial Contact/Notification an

Inquiries from any law enforcement agency regarding a security incident, including formal legal process such as subpoenas and warrants, must be directed to the General Counsel of Internet2.

-

IF YOU HAVE A PGP KEY You can use InCommon’s PGP public key to encrypt sensitive information you send to us via email. Information on this key is available at: https://incommon.org/incident-reponse/

-
-
-

IF YOU DO NOT HAVE A PGP KEY, DO NOT communicate any sensitive information via these channels. Internet2 staff will set up a secure communications channel with you, if need be, after your initial request is received

+

You can use InCommon’s PGP public key to encrypt sensitive information you send to us via email. Information on this key is available at: https://incommon.org/incident-reponse/. DO NOT send sensitive information in unecrypted email.

The CSIRT will accept, evaluate and reply (when necessary and deemed appropriate) to valid submissions as soon as possible, but in no event later than 24 hours after receipt of the notice.

@@ -1062,7 +1059,7 @@

Appendix B: Acknowledgements

diff --git a/main.adoc b/main.adoc index edc568f..2769cd0 100644 --- a/main.adoc +++ b/main.adoc @@ -90,9 +90,7 @@ Any party may make the CSIRT aware of a relevant security incident or disclosure *_Inquiries from any law enforcement agency regarding a security incident, including formal legal process such as subpoenas and warrants, must be directed to the General Counsel of Internet2._* -*IF YOU HAVE A PGP KEY* You can use InCommon's PGP public key to encrypt sensitive information you send to us via email. Information on this key is available at: https://incommon.org/incident-reponse/[https://incommon.org/incident-reponse/] - -*IF YOU DO NOT HAVE A PGP KEY, DO NOT* communicate any sensitive information via these channels. Internet2 staff will set up a secure communications channel with you, if need be, after your initial request is received +You can use InCommon's PGP public key to encrypt sensitive information you send to us via email. Information on this key is available at: https://incommon.org/incident-reponse/[https://incommon.org/incident-reponse/]. *DO NOT* send sensitive information in unecrypted email. The CSIRT will accept, evaluate and reply (when necessary and deemed appropriate) to valid submissions as soon as possible, but in no event later than 24 hours after receipt of the notice. diff --git a/pdf/inc-security-incident-handling-framework.pdf b/pdf/inc-security-incident-handling-framework.pdf index 6c457ad1526b067a9f72e5daf8e503de5a592f07..99f071e5697eaa2f2c24efe6f5b1eb004bc961cb 100644 GIT binary patch delta 7568 zcmahuX>^sioLEU&JeUpJxl-nvCAW46pk!>MA; z5j!zmPyAKmf>mouW4g+7Ce;z%gOdh<%=b)sr$|oXtysFKZe?jq^Z1ID%w9Qn>9RUn zTm0F{|3)-p)!RVF+2^1%WSinlu)JpJ9ZMF>T{^EWW*hu!^?b0!{-8XMWV>yrdB>FE zsh~EW+&4%fwomR0H^adf1jqEre|zRxNi$?T*$9Pv&cVsee|)`D*BsrFomkE4VDQ$O zpl-)i{?cE2^Vk2nm#H#ueNV;XkHNHn7FTpt=cnE)#gSW?kJs!B^AYbKjwIlzoM;KaBD(Kb)39&`_+nshEl&7*u6TGYzxO)QRj2e)5AtK2r1X{U6;j&~!|?%@Ui2 zsadM!ShA(lx30?c?>wU6m~(mUTZ3`rEa=bsebR$heVENZJKU{#@+ZB3kNvoy`6r)- zA)xDYqlrZ>gn09Ry)EgAgK|ELHt+je0Z6*6;cFt3cyF6$ZB5tSpXzWvk?Li#Xt3i z0T_yr3E%kqQ@-_LAzqmVckrT1A>QrpJ#l0SWHsM;$wwz-nNRsFf|WDD-@N9FI56^` zJugO@PkcETnCYO>mDr5E2?1O)oMktMujGNG8XBI=CitXZLLRSaJuRu^oA5z|+h2Vy zsfvlm=dmcS_&C_3~W0GP@Q!@mb$qmlWN^=!Mswfqa+nvVMf|R7J3viDh!@6fBgD~~mFo`VryP|$ zjNH+VrM+_P_oan1RLcw2^1JT7hdy*miJMMr$pecP&E(^5#3V&A_~IJ_3l!C~f+I!* zSFT!7SGzd4JQy4z$BkIcTt4OCD9o7*S(4>wykS^`zjX0V?86|8Z_j{2TvkJt{zX^l zk3VJbC9`aPbWwr3MS>{!$wA{9p5IKKGW)IBZI@d%`f!9FS|m%;dF%WrUY-WiaY+C| zNl1jt$HVTi0Azt=DK=kzGKz0?f~Cx{uxK+GqT=i6cq|KoNkD{Gzvjd4jcfpZmj%n1 zW#Fhyg!bCi>G*DE2qyu8>_99F!g}H+PD$Y7x5IcU2=8_?4JWRfW~^pjuzakBO?_BD zJlh3kO0~dgO@2eumcyoXmq=lA&n0HmN^P<-4I1L4096S`FNSLJiILeEh4g7vq;?DQQA!{o{7Q{zn3|LaU(c0 zpKkWn{NxkF_S4|U_wwOCsB#&U^E~d36bKw|Es_Nm_XH|&vL07(%5HL|%ROOsYCV?q z#KncM+HdNVJF)d~7RK)j;VH@+re{`>82s+@y`U>)21>ife;;)zmGl6=ZNwcDFZO|l zDEhsukncXy7iLgQ>s~U*cfX2($PKEO39wH;c-f10N(B+V`Hg^kxgXh51UzMcD37hr zL302+BPoWNNC8JLPRC)zY1^6@#I~Px>|u+&vhgITaPL z@(FcI=C8UhMoGXSR;IsT%Y>@lSb3fv3ja0}q7AyDX+C{O_biz=R?AheQZ`mD*u zSRLzxTUGd8vUCgIEGI{QNrT3KrKoXR!?8N7pbCGyTBLd%PE#;Z;-5-~g%Z1%BzzJQ zX}rznR+vx%0V-l~OTpvAiGjy02!r2L&A5YSiLGZ2Ll2xam9qSQ+Hl=(Dhm0}x(d?r zCk~wP*$ydBu7>-u_b>?i#nQr)`4Dj@4g;AIk`^bYIN2S-E>=JY0)}D5ZSSrll0nXO zY$!<}N)Wz2f|yH!gkOZ+?v=!gWT-OMS3tg7IT8wp0BMvYZ@7c%*!ofM=OlpFei6at zx59xG!rAepQ*|`_jM+BM8A1A3eJ|_b{%tf!#FiR&6x`F5LcWS>uiJAB1i`NpZ;FsQ zW83(WVHB}^$Efa~W>hbV!a-BN~db?kY2fwJkHY!!5 z~pfNpNfbm&LXOFBsS z7~c4ns@bwRNz>@7^{O6!K2$6CL5My%1-?Mc((j z$MMy>U?jdfm;!Rs_*a=`^HCEfhyWepQ)0H)f>-K_D9kfO(XCrDZ|S`YgSu#f#m9_f zKc6hx7U_+ed9P@varvd|WAKf8z=#;K5+`ChncZ-xxErKN%G9+xSiu-wyaE0JNnIC> zM+QmJ#tYoGnL#z3bdT+LNdYJS5_0j91~mc8&_$F}e$K;@b6`!tqCh3_gj=3ITHt;$ zhhmJ%w<6*y;`Y23Mu5+ux+~Nfbyv;>ot&TQu25&h{p~zbFEv75e7LzkqBKm&z!I_H zh3vTb(3jM$sfn-%=d0x*t}ENV6Q` zufRQiKjeU)LQMAf#a%;Lu6t<_LFOUJ`_4>=tXI)<;PG8evP!0NENu{6jjDf z4}nck@*B;|j_y4Vi#)24XBc>FIN4(3BTz>7I6@u5mH+%G3?tVjPQ7f{3(M=_>wrpc z7G1?fYr()1KL-lwG+=n@`{-I28cf%cUyv;kIz8oP*OeV(`n^YJOQ24$_e4jCt&seYlOHCE=Su0Tz1r)}k7P(wI?4I^hIJBun4!h)Z{?f=RWp)@Zk z$y2N(9pj(e=J6v`mw%I=HWa86;kB}kn>IjazbIgdJb*_xz*MhhQ7BV9;o1u3#~&Vt z7>?Qq#Uik1av++3bsM2Z#1$n$k;L%wMyO_{o#>VB-UO4Fp<;K1iqYxaP#sV-liU!C znxF!wJ_%F*g}w9AQYQ_X7CPa3X`$PRc$!GgPKUZQKmweWLM5B&2UQgAYLGYsa@RT}zcm zIWgQBM**HJTgj1DsuEJYr%6)#N+>2vUWsdus}nA@ElV1y(j0GuOSj_TM(FC*W2!f! zCd}(pK9W+J(w05s*h7Y8&aQt=s6HgCe3e zisiYN&cPki@SStXI}L(PSmRS;wuy%e?%u(&K*K{jSXnqZk(f}sa#f5nxR~#a z7=gQXP#Zh^Aj`(CJ6Q?gPT9r6R6oY=WD0&oO^Lg8C(DM!&@fm&dg%j8R>c&ZUfl~; z2tvt0p-0v7B%_Jvin<45rY>lV$Jj0=6FrZtB|rtZb{7@+z%KeazKb;^HhXnSoHFr8 zyP1mHcCp_0>TXt*Jc@VirdQ^HJ**opraldy+RX;Iig5BhS6*T$oSq7Kq0;9dVQx6YHl#4i53yd<1>bgWMvpK2FTMn~AMs5*$p7qE1hgl^)_&lpAPWVC6ta8$HG?ntEzqi$qg=ZvuX#m>K zv#!|p1$G(~_rG5tpKw2af%OEp$4hMdEi^cWbCgsb3rZ2(@E6vPJn6_^gbCcrE>g9h z*(Ns4ksSAT@3Ffju-rZ$v2lZm+teuyEODR^Uk^&laDGtAcE@#*#`-~a8*-#Z8Y#O2 zLegA%DW{J_u-TDHK*9GNX)^^VT{Oi{j1WH6<{na>d!bTVAQ21Iqa~V%m~BpOzegHC zs`<@5bka(mv|Zv5CFVHp(0NjSR-yYAA)eJ2tvO?^%$5Uig$)rcHdL>hZ0@2AltT>w15oS7+ z4BIlJD2{DrsGnetOwQg8Pp9Fkr$LfGC9$F_rkp7WO<|PGOXx}0K|0g6MAd0`iRmcX zKY&?n85H`bzYI_>(BZHtXV{qVL_3^$iQ{DAS+cBUm{YN2MajIwBK_-`s2_0#xRlt%j1-&DV)Qm2)9m>v@y2+|a>Bh2n#CQEfX zGOf|vr0pG~f5p;hpxYMc!K@CBWND6_seX(8I@6AzIIGjcKa-wr(I1@JYsS`XxjrMD z6x)#14v41aWZKTQG&$48#9jx9DInxbZ8?sU60Sbw{WROLGh>?~R`;?L@twv~WV0il zDvQ~P_}#=)9V3H5RiQ-FUW0`q+U3l6SBV}CaA1*CNSPY@E|N;RD4L}Oi;Krh9vl2W Dc3uWK delta 7802 zcmbVR33Qd!wO;%D_a-4s3EUwA$c+pp1TOzPXb1$wDwBW=S_}a(Ac_PO>B6T*uxeYR zfTyx4QXmY9tth9#DzCLp)dKcewGN^6IWAjJ>uXW!`~Lslo8hMITkGLk=AM1_ z-e=EypYuO=y#I+;`)@fMH7v_iw>~~R_+e>V-<%yYQ)+5<@wl0bmo-mYe0B4Rn^LYO zFQjKjnrg6Wi2>G3_yO<%a1a$&d%94<|?ddivO; z9THSGExB>|n&nFtuUNijT}{d~WXX(X;H{l8nl#xq&(zHAWXXlIYGSSvkQ9%b(=vDE@+B?TG^bo!em-*z>6x~!T3&rh_tK7Q>8Uz%sb%S^>6%)7%2m^< z<7%lo%Qgd`23*y2EET`6HZ4#ALGvsiczn8$E|00{Zs%!^lh$-ocDy!J=&C&X+FmY- z(B%bM+ObSej`@9!YooIlEdDrl$X3wCuhB9@|Jp1 z<+is*@MAAfwAfy1H#>%H=}YC}N2h?bXIZvve7jOEj}9pRr~1j=ZzeDN|ESr`DEbm8 zwfoKMDl&)Wgw|a1@MM?S9(@`1!U8$V#lem28t>hrbwmlm* zbxhl}tw4*=h<&uQZaEJ4$!#4Y`JQvd0L3wMKCDpEbPQl?HvWOm0sRsiVg$5~iNBTu z--J8?u??(saK-7VNw$GgG`ku9Ss@LmgOfq!*-ITOPzU_LH^hL;@e9-;949&^FT8>* z?pR5+5eJUqstS?tLRv=;X`4fi&?)2(T1RuNK(jzL>=`%D1aX@ieX6!G@g|4>d*!!*;D z-1=;Sn@VVaEctOnrrtRuKX|`FK5=ZJT=7ALZ2IrLQQb4s9v>%)%cc|aW?T0?pAh#v8HxhjKVT!b$`RF_nnkqX^CAp(QMB68PoFYZ@%pfSr_|3(w%co5d)kqui_&W(!3uvyqAD3|`(G6e-io;W)yqPm*dqjbsb|Fcl8eW_BG z{PinYa>7FVt6UlvN%_-b^W^h?kBiJY!5?2D%G*o6DkWKYyjVVRY{26lRgj!~;+y=t ziDF<-S)%+A(UVadF>A?&?{!c1rq<=h&fl@Y_p z#tt8zP4jq9H5G?2dGziC-w~y4q;XXx{5h_GuFw2VO7+Mnezkx$L^VCFxw7MxIIk(B z*P@nZr%ieEG@n4GQbQD>PcslZ4f~lC6XP1!AzpI#rkYZUb z0xY@BqzFIRmkuhH;e-LUz8^JZ7ZBwJs^ZOas0OAR+XreJaFJ#OaaYdY>rV?sW|8E+ z1L$_e^b7=GlJ^Y&kIW*$jU_ag(*x-TQ8UQ(P^5PU(!%UAn{o}j~uVQNzK%Xnv!7G@Vop8hc$vS2W!MDFGf%-yXMm)=(K#YZN2|S z4b3E8)FLY6muFHDJ>`ZI0k_s7ruy#`{ds>arQ*7k){WH4n^&x8EN)(TP0Q8S6&o(E zucbsHs9~0ux99QE1vEIKp@W8*$;v2-@r*H4;cKIiCHJQgg7=NZ8FSC0H=<}XX^k5i zDIOHcrml5NZhk4wuT;}rvZSbr&mTka2xbj~PhUfE|JpGW6iI`%Z-LXWr>V$4GL|fg zqFJC2Hq4`#|5ch2RA9U4vL2U~!pfuLVgOH2>COThg~#;xS(R>#U>3m;0HlH`?6w5)%{h#SngIsbPo-mIR{#OQ7Vrgqk9wm9x0UE>|GpK;4S#(yh zOpDd?0bgR%ixJ&StKlJ`Lv}lXHUVh$S}=OaA&pSX(mJ1>18eQRRz&?F9s(?CVv;dK zeHh1q_4yHm?Po8Fqz^=HP_*-Q^4xX#q>mhZXp)DfSQkejc&`W zVG@7YCDb42m$<+G6&3<>TaO0j>SZ- zT|i#KG%(0IDU66H54MN96vi(r?A{~H;3oACm}25gds(L3x(Uhn>jhL4F>FW8l#$m0 zXT0_IA%4+Z>PDa-wkfK0$#5F0TuC~`SdQ|aTV1H)0U@~CHbj3RGf~- zq47$U=0?#PFBVjuCjZXNV zHjzUS13gimd^q7>v=~dY!=Ur{@@g7JXwqJ$(fBVe!CJ9`zT}59T#5YtCvm^FnG~SG zEIJ=0k@Tl5MHP$U+Jw4({GG75Zw$(U6V9ssxN8yjLUrZV3ljcS%Y)j3F3Tr(QJKHz zx-i9YQ9{+eJK>+ao(yc;Xc^0re)FKJm~u;a`YP(@-*5|! zAPkLL01eCAWB*2<7ib#Ho@vzH1AaOuUZHY_-sT4`D$Cy0UTvEvvyIZif>l;{*DhY$jI z^)nPA^a&V*0`)wR8v>bzZJ;iME(Yj^sw^FD^OhY{)Fn}zYu3}scuu0s9G(-XYS@^7 zT~WMKpzMCmHsN-kfI1YX$7!K7vSdnOqSHW~)S)nedFr`Kn8U>h?$|(U{*^BVho0{4 zCRgLqPsxl0BH`xV=_MfA^5m8=p^v)lcACuP0qaD4frdCWZ1^V5yS_F}IT^o$f;=i~$lEIGJK%uf114wpCYpg!m?!38Y17+kp@F~8z&8Y(nfo?2GU z&+n&m`B!&SHQ-0yMLR3Fhvt*P6L#WV;8UOM?E*h{ z)9!D(Xf(Hdhcpbn4r>ae!kixEPrifEIMlB!n4ogfG8P40jTO-OR z!-gS7V2ytwmF+*?B5oNj*Y7u@0bQAc}SG9Gw+{v=3&zAH5FKa;GwlFhua>6 zoWJ>=DB=V6iv}*cU);;)YA;L3-;$ARV(^6p_i+ zb}?p9_R(P4;+xiB#0X^Jv)jc;-o9Pb0O!~PB91!$>UN>A+#xEsWw$8wM}J=+2uxOY zh-6vzVKn66hHBt}_r~V6{9oIJ$s-@YfsgDE8n}Sj5I(a*)bhxkVkl2~Ky1oD;PbiJ{qz z7x(5)@3#+pr|uOivOBl!1B>_eihogo)D!Y_~{2lJsS^- zx{Lv1L%Ul(g*Toc%*S2S46iQ8M9gsB{Sb_@aXbF^)`Mc*$k5rv<1TEudF7gvn(1k8M;uf7YwwN`+iLQliBCCx0*OTJi$YTCOTohGGNs8wKw3 zIok12()@G!EB7g+`=DAflK*Ne{rL0aBE=JJr5a(r+*UT@=x!vIKebNTs_>b4K!un^ z{;3H{agtx3k9EO(l$i43)i)6#8n=i)5{hv{^jfKx?awXtvP)(6>rO^7u^{G=6QL< znrf)Q2b!LEh8jeC516iE_UQ$)@Q~RZuT>47@bjz?z`Q&wXeP#rJmUgpy7|J`;YXG3 zhp3vZTD_FRbG>1-_K-%^997lwLLz`!`2ylgf!!MqAAWlA!)tvnnA;g8t=TxnAs+6N zJ*5T=UqbR=nr7r%#?dUjr&*y0riPhUvLiq-AUA&^?;UT4ZdB*chx2J(x@hM7m^R?6A*sv6J zlN$arjJ&uDeA*jN_wWU?htRraxOm^rgL$w+buXZopW-^G@#eAaTBS0m(Y)