Inter-university IT Service Information Security (HITS IS)
- HITS IS
- ISMS Consulting
- Conducting internal audits
- ISMS consulting and support of the GRC tool
- IT Emergency Management - Consulting
- IT emergency management in the GRC tool
- Security Awareness - Concept
- Security Awareness - Classroom Training
- Vulnerability scanning service
- OSINTaaS - Shadowserver as a Service
- OSINTaaS – Leak Notifier
- Information Exchange (MISP)
- ThreatWatch
- eduCSIRT – Emergency Infrastructure
- eduCSIRT – Incident Response
As part of the emergency treatment, the eduCSIRT provides an emergency infrastructure that participating universities can use for the duration of the emergency in the event of an infrastructure failure.
Scope of Services and Service Specifics
After successfully completing onboarding, the eduCSIRT will provide the services
- Emergency mailboxes
- Emergency website
- Emergency File Storage
- Emergency video conference
available.
Service Parameters
After a successful check of the documents, the emergency mailboxes and access to the emergency website are usually set up for emergency operation within a period of 5 working days, provided that there are no further queries.
After reporting IT emergencies, the eduCSIRT activates the emergency infrastructure within 4 hours. Access to the emergency web page depends on the configuration of the DNS service of the affected institution. If you report after 3 p.m., the activation will take place on the next working day at the latest. In an emergency, the emergency mailboxes can be activated independently by the university in a pre-authorized manner (after successful onboarding).
Emergency mailboxes
In the course of an incident, the emergency mailboxes requested in the onboarding process, named and stored in advance (starting quota: 10 e-mail addresses) are available via the eduCSIRT and can be used for the duration of the emergency.
Emergency website
During onboarding, two websites will be set up for the university. In an emergency, messages can be published on a replacement website via Content Management System (CMS) for external communication. In addition, a playground website will be set up separately for the university, where people can familiarize themselves with the CMS.
File storage
During the emergency operation of a university, a file storage system, hosted at the Leibniz Supercomputing Centre (LRZ), can be provided if required.
Video conference
During the emergency operation of a university, a video conferencing system, hosted at the Leibniz Supercomputing Centre (LRZ), can be provided if required.
Requirements
As part of the onboarding, the university provides the eduCSIRT with two unused YubiKeys for authentication at the CMS of the emergency website.
Successful completion of an onboarding process is mandatory for the use of the eduCSIRT services. This process must be repeated every 2 years. Organizational or technical changes affecting the onboarding process must be reported to eduCSIRT after they become known. The productive services within the framework of the emergency infrastructure can only be used during an emergency at the respective university.
User / Customers
This service is made available to the following categories of users.
| User class | Note |
|---|---|
| (1), (2) | only for members of the Digital Network of Bavaria |
| (3), (4), (5), (6) | not available for these customers |
The service can be requested by CIO, CISO, ISB or data center management of the universities in the Digital Network Bavaria via e-mail to informationssicherheit@remove-this.digitalverbund.bayern .