CERT-FI

Information security incident means a situation, where the accessibility, integrity or confidentiality of the data in the information system of an organisation, enterprise, association or a private person in unlawfully modified. This may mean for instance that the operation of another person’s or organisation’s information system is complicated or hindered on purpose. A security violation is also concerned, if the information systems or data of an organisation, enterprise, association or a private person are used by an unauthorised user.

CERT activities mean prevention, observation and solution of information security violations and information on threats to information security. There are several CERT organisations all over the world. They co-operate with each other and distribute information on information security threats and related matters and inform the users of systems e.g. via the Internet. The main goal of CERT activities could be to prevent and control the violations of and threats to the data in information systems as objectively and efficiently as possible.

In FICORA, the group focused on information security incidents and their control is called CERT-FI (Computer Emergency Response Team FICORA). In its activities, it tries to implement the principles of overall CERT activities and to promote security in the information society. CERT-FI cooperates with national and international CERT actors and representatives of trade and industry and public administration. FICORA also coordinates a CERT working group, which acts as a cooperative body for different actors in the field of observation and solution of information security incidents. This working group also follows up and promotes the general evolution in the field and knowledge of it.

CERT-FI receives the notifications of telecommunications operators concerning information security incidents and threats. In addition, the CERT-FI group of FICORA continuously follows up worldwide the current events in the information security, security problems of information systems and security incidents and response to them. The duties of CERT-FI are among other things:

• to implement nationwide monitoring of incidents, documentation and statistics
• to make and maintain an estimation of information security threats and to inform of observations
• to give recommendations, advice and guidelines for improvement of information security
• to diffuse information for the prevention of information security violations
• to help solving information security problems
• to cooperate with suppliers of equipment, networks and software
• to be contact with the Police and other authorities and to coordinate the cooperation in information security
• to follow up and analyse international and other development related to information security threats
• to maintain international contacts between authorities in CERT activities
  

www.cert.fi/