SECURITY PROCEDURES FOR OSG



REPORTING METHOD
  • Email to security@, abuse@, and incident@ will be sent directly to the primary GOC security contact in the form of an SMS message to their cell phone.
  • Email to goc@ or help@ will be sent to the GOC operators to review, if it is security related they will contact the primary GOC security contact.
  • Phone calls to the GOC will be answered by the GOC operators, if the call is security related they will contact the primary GOC security contact.
  • If the primary GOC security contact does not respond after 30 minutes contact the secondary GOC security contact.

SECURITY CONTACT REVIEW
The GOC security contact will determine the criticality of the report.
  • Urgent - This includes a compromise to multiple OSG resources. The security contact will contact the OSG Security Officer and the OSG Executive Director by cell phone.
  • High - Mail will be sent to the OSG-INCIDENT-DISCUSS mailing list for review and discussion, the proper course of action will be determined by the OSG Security Officer and the GOC will alert the community on the Security Officers direction.
  • Non-critical - A GOC ticket will be created and the problem will be addresses as a normal GOC trouble ticket.
CONTACT INFORMATION
All contact address and phone numbers are available in the secure GOC internal pages.

RELATED DOCUMENTS