Inter-university IT Service Information Security (HITS IS)
- HITS IS
- ISMS Consulting
- Conducting internal audits
- ISMS consulting and support of the GRC tool
- IT Emergency Management - Consulting
- IT emergency management in the GRC tool
- Security Awareness - Concept
- Security Awareness - Classroom Training
- Vulnerability scanning service
- OSINTaaS - Shadowserver as a Service
- OSINTaaS – Leak Notifier
- Information Exchange (MISP)
- ThreatWatch
- eduCSIRT – Emergency Infrastructure
- eduCSIRT – Incident Response
The ThreatWatch service provides timely information about large and far-reaching IT security vulnerabilities in the university environment and makes it possible to understand the problem with the relevant background knowledge, as well as to prevent exploitation with concise, understandable instructions for action by presenting an effective solution to subscribers transparently and evidently.
Scope:
- Mailing list to which the security instructions are communicated as warning messages to all subscribers.
- Mailing list: threatwatch@remove-this.lists.lrz.de
- BayernCollab (Confluence) pages as an archive of the sent security instructions as well as further information: Link: https://collab.dvb.bayern/x/M4I6Pw
Service Parameters
Relevant updates (e.g. exploit or patch available) will be published promptly on the respective BayernCollab pages on the corresponding security advisories and communicated via the mailing list.
It is at the discretion of HITS IS which weaknesses have sufficient relevance to be communicated to the universities.
Requirements
- The university does not need any Requirements to be able to receive the service.
- The service is requested with an entry in the ThreatWatch mailing list: https://lists.lrz.de/mailman/listinfo/threatwatch
- The archive of the reported safety instructions as well as the current safety instructions are accessible to all interested parties in a HITS IS area in the BayernCollab https://collab.dvb.bayern/x/M4I6Pw open to the university.
User / Customers
This service is made available to the following categories of users.
| User class | Note |
|---|---|
| (1), (2) | only for members of the Digital Network of Bavaria |
| (3), (4), (5), (6) | not available for these customers |
The service can be requested by CIO, CISO, ISB or data center management of the universities in the digital network via e-mail to soc@remove-this.digitalverbund.bayern .
The service is offered to all interested parties in the university environment, with network managers and system administrators in particular being the primary target group and can also obtain the service independently via a mailing list subscription.