INCIDENT HANDLING

To report a computer security incident you may use any of the following forms of contact. In the incident handling process, RCTS CERT safeguards the privacy of the individuals or entities involved in full compliance with GDPR (General Data Protection Regulation).

The taxonomy used in incident handling adopted by RCTS CERT and the National CSIRT Network is presented in this document (portuguese only). Incidents should be reported to report@cert.rcts.pt.

AUDITS

RCTS CERT performs audits to websites on-demand, upon request by e-mail to info@cert.rcts.pt with the information about the websites to audit and the period where said audit can be made.

PHISHING CAMPAIGNS

This service aims to prepare users at organisations connected to RCTS to deal with fraud situations through e-mail messages, by simulating a phishing campaign and delivering a wrap-up session. Scheduling and campaign definition should be requested through info@cert.rcts.pt. 

DNS FIREWALL

This service protects RCTS users from communications with malicious nodes, if that communication resorts to name resolution. Each organization can activate this service for its own networks upon request to dnsfw@fccn.pt.
Cookbook for this service is available here (in portuguese only).

VULNERABILITY MANAGEMENT

RCTS CERT delivers, upon request (info@cert.rcts.pt) and through the usage of a market leader tool, automatic (and periodic) vulnerability reports about a set of web services/servers.