{"id":2456,"date":"2011-12-07T08:57:50","date_gmt":"2011-12-07T13:57:50","guid":{"rendered":"http:\/\/www.ict-pulse.com\/?p=2456"},"modified":"2013-02-06T09:56:05","modified_gmt":"2013-02-06T14:56:05","slug":"the-value-of-a-computer-emergency-response-team","status":"publish","type":"post","link":"https:\/\/ict-pulse.com\/2011\/12\/the-value-of-a-computer-emergency-response-team\/","title":{"rendered":"The value of a Computer Emergency Response Team"},"content":{"rendered":"

Although many organisations have established computer security protocols to deal with possible cyber threats and breaches, they could still benefit considerably from the support provided by to a Computer Emergency Response Team (CERT). This post discusses what a CERT is, and some of the benefits of having that resource, especially in the Caribbean.<\/em><\/p>\n

\"\"<\/a>In today\u2019s society, the value of information is growing at exponential rates. As a result, organisations and even countries are under \u00a0considerable pressure to constantly improve their protective mechanisms should any security threats arise. Generally, but particularly in the Caribbean, network security tends to be addressed in isolation \u2013 individual organisations implement their own systems. There is also little information sharing, and few (if any) established linkages within the industry to disseminate critical information should a grave security threat or incident affect one or more organisation.<\/p>\n

A Computer Emergency Response Team (CERT), which is also known as a Computer Security Incident Response Team (CSIRT), is an organisation comprising experts that handle computer security incidents. It is usually established to monitor and manage threats, either for select organisations, or throughout entire countries. The scope of a CERT can be quite broad, but at the core, most are designed or established to<\/p>\n

\u2026ensure that appropriate technology and system management practices are used to resist attacks on networks and to limit damage and ensure continuity of critical services in spite if attacks, accidents or failures\u2026 (CERT<\/a>)<\/p><\/blockquote>\n

Typically, their primary functions include responding to computer security incidents; reporting on vulnerabilities; and promoting effective IT security practices.<\/p>\n

Why are CERTs necessary?<\/h3>\n

Many countries and regions around the world have established a CERT, but in the Caribbean there are very few. Among the islands, the exceptions are the Bahamas and the Dominican Republic. Several international agencies, especially those that have an interest in cyber security, have been strongly advocating that CERTs be established throughout the region. While the countries might be amenable, the units have yet to be implemented. Nevertheless, there are a number of important benefits to be realised, some of which are outlined below.<\/p>\n

1. To provide expert information and support.<\/strong> Although new security tools are constantly being developed, there can be some complacency among network managers if their organisations have firewalls and if the antivirus software is up to date. However, numerous other threats and incidents can still occur, such as those based on hacking and denial of service attacks, which exploit weaknesses in hardware and software solutions. Hence organisations could benefit from having access to the expertise and support that a CERT can provide, which ultimately could result in significant cost savings through avoided incidents and reduced downtime when they occur.<\/p>\n

2. To supplement internal security plans.<\/strong> Organisations with elaborate computer networks and\/or high data protection requirements usually have comprehensive security plans and schemes. However, computer\/infrastructure threats are on the rise, and the criminals behind them are also increasing and becoming more sophisticated. Hence those plans and schemes are often not as dynamic as they need to be to address new and developing situations. A CERT could advise on current and imminent threats, and provide guidance on addressing specific occurrences.<\/p>\n

3. Cyber-security systems are lacking in the Caribbean. <\/strong>In the region, there is a general sense that due to our small size, we are somehow not being targeted for cybercrime. However, this is not the case. As reported in our post, Where is Internet Governance going in the Caribbean region?<\/a><\/em><\/strong>, one of the presenters, Gregory Richardson of 1337 Networks Inc. stated that:<\/p>\n