[GamChix] Fwd: AfricaCERT 15: CSIRT Maturity

[Alagie Ceesay]

---------- Forwarded message ----------
From: *Jean-Robert Hountomey* <hrobert at africacert.org>
Date: Monday, June 10, 2019

Dear Colleagues,

We will be streaming the meeting. Kindly join the audio conference.

https://isoc.zoom.us/j/504986340

CSIRT BASICS

Sunday    09 June 2019
-------------------
14:30    CSIRT BootCamp
16:30    Break
17:00    CSIRT BootCamp
18:30    Dinner

CSIRT Maturity workshop: Stimulating the development and maturity
enhancement of CSIRTs.

Monday 10 June 2019
-------------------
08:30    Start of programme
09:00    CSIRT Maturity : introduction
11:00    Break
11:30    CSIRT Maturity : organisational factors
13:30    Lunch
14:30    CSIRT Maturity : human factors
16:30    Break
17:00    CSIRT Maturity : tooling factors
18:30    Dinner

Tuesday 11 June 2019
--------------------
08:30    Start of programme
09:00    CSIRT Maturity : process factors
11:00    Break
11:30    CSIRTs working together: nationally, regionally, worldwide
13:30    Lunch

Pratical CSIRT Case Study: TunCERT

Tuesday 11 June 2019
--------------------

14:30    Opensource tooling
16:30    Break
17:00    Demo: Ransomware Analysis
18:30    Dinner


*Title: Incident response workshop by Estonian and French cyber security experts
*
Description – the workshop will focus on the operational, tactical,
procedural, legal and communication aspects of incident response. The
experts will deliver sessions covering the whole incident response
lifecycle from incident detection through various
escalation levels until the implementation of mitigation measures and
post-incident activities. This includes incident response best
practices, workflow, classification, SLAs and team composition/roles
along with business impact. Special focus will be dedicated
on internal and external incident communication. The issues pertinent
to compliance and supervision, as well as risk management and their
role
in incident handling will be covered.

Who should attend – technical personnel (system administrators,
developers, engineers), incident responders, management level
participants,
people involved in communications/PR, law, compliance, business, risk
management

Wednesday 12 June 2019

08:30    Start of programme
09:00    Threat landscape, awareness and community building (RIA and ANSSI).
11:00    Break
11:30    Establishing incident response (history and current practice
from around the world)
13:30    Lunch
14:30    CSIRT organisation and legal framework: French and Estonian examples
16:30    Break
17:00    Communication (internal, external, communication channels and methods)
18:30    Dinner

Thursday 13 June 2019

08:30    Start of programme
09:00    Incident response taxonomies and escalation paths (Part 1)
11:00    Break
11:30    Incident response: examples from CERT-EE and ANSSI
13:30    Lunch
14:30    Exercises: validating your skills and procedures (RIA)
16:30    Break
17:00    Supervision (RIA)
18:30    Dinner

Friday    14 June 2019

08:30    Start of the Program
09:00    Presentations
11:00    Break
11:30    Team updates
13:30    Lunch
14:30    AfriNIC Whois for the Incident Responder
15:30    CyberHealth Ecosystem Analysis
16:30    Break
17:00    AfricaCERT Framework
18:30    Dinner
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nsrc.org/pipermail/gamchix/attachments/20190610/950c11ff/attachment.html>