IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
S 2.35 Obtaining information on security weaknesses
of the system
Initiation responsibility: Head of IT Section, IT Security Management
Implementation responsibility: IT Security Management, Administrators
To counter security flaws that have become known or have been disclosed in
publications, the required organisational and administrative measures must be
taken and/or additional security hardware or software must be employed.
It is therefore very important to obtain information on vulnerabilities which
have recently become known. Sources of such information include:
- Bundesamt für Sicherheit in der Informationstechnik (BSI), P.O.B. 20 03
63, D-53133 Bonn; telephone: 0228-9582-444, fax:-427, E-Mail:
cert@bsi.de, WWW: http://www.bsi.bund.de/bsi-cert
- Manufacturers or distributors of the operating system inform registered
customers about security flaws identified on their systems and provide
them with updated versions of the system or patches for remedying those
security flaws.
- Computer Emergency Response Teams (CERTs) are organisations which
supply information on operating system flaws identified and on how to
remedy them.
Computer Emergency Response Team / Coordination Center (CERT/CC),
Software Engineering Institute, Carnegie Mellon University, Pittsburgh,
PA 15213-3890,
Tel. ++1+412 268-7090 (24 hour Hotline), E-Mail: cert@cert.org, FTP:
ftp://ftp.cert.org, WWW: http://www.cert.org
CERT messages are published in News Groups (comp.security.announce
and info.nsfnet. cert) and through mailing lists (inclusion by E-mail for
transmission to: cert-advisory-request@cert.org).
- CERT in Germany:
- BSI-CERT, Bundesamt für Sicherheit in der Informationstechnik
(BSI), P.O.B. 20 03 63, D-53133 Bonn; telephone: 0228-9582-444,
fax: -427, E-Mail: cert@bsi.de
- DFN-CERT, Hamburg University, Computer Science Department,
Vogt-Kölln-Strasse 30, D-22527 Hamburg, tel. +49 40-54715-262,
fax -241,
E-mail: dfncert@cert.dfn.de,
FTP: ftp://ftp.cert.dfn.de/pub.security
WWW: http://www.cert.dfn.de
gopher: gopher.cert.dfn.de,
Inclusion in the mailing list for CERT messages by E-mail to:
dfncert-request@cert.dfn.de
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000