Dealing with security incidents

Some procedures to deal with security events

Sites facing or suspecting a security incident on their resources have to follow Incident Handling Procedure

New vulnerability issues of the middleware should be handled as defined in the related procedure with a guide what to do when you find a vulnerability.

Sites having critical vulnerabilities are handled according to SEC03 EGI-CSIRT Critical Vulnerability Handling Procedure, and if they do not respond properly, they may face suspension.