-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

1. Document information
This document describes the incident response service from Universidade do Porto (U.PORTO), which is a portuguese university located in the city of Porto, according to the RFC2350.

1.1 Date of last update
Mon, 14 Dec 2020 15:35:00 +0000

1.2 Distribution list for notifications
There is no existing distribution channel for notifications of updates.

1.3 Locations where this document may be found
The Portuguese version of this document can be found at https://csirt.up.pt/pt/rfc2350.
The English version of this document can be found at https://csirt.up.pt/en/rfc2350.

1.4 Authenticating this Document
For validation purposes, a GPG signed ASCII version of this document is located at https://csirt.up.pt/rfc2350.txt. The key used for signing is the CSIRT.UPORTO key as listed under 2.8.


2. Contact information

2.1 Name of the team
CSIRT.UPORTO
CSIRT University of Porto

2.2 Address
CSIRT.UPORTO<br />
University of Porto<br />
Praça Coronel Pacheco, nº15, -206<br />
4050-453 Porto<br />
Portugal

2.3 Time zone
Portugal/WEST (GMT+0, GMT+1 in Summer Time)

2.4 Telephone number
+351 220 408 721

2.5 Facsimile number
+351 220 408 186
+351 220 408 187

2.6 Other telecommunication
Nonexistent.

2.7 Electronic mail address
- - - - - Email address for incident reporting:<br />
incidente.seguranca@uporto.pt
- - - - - Email address for other business related to CSIRT.UPORTO's services:<br />
csirt@uporto.pt

2.8 Public keys and encryption information
User ID:      CSIRT.UPORTO (CSIRT University of Porto) <csirt@up.pt>
Key ID:       0x67101002       Key type:      RSA
Key size:     4096     Expires:       never
Fingerprint:  EA9552E3A3512E07DA7548CC5887FE8767101002

2.9 Team Members
Members: António Meireles, José Filipe Alves, André Alves, Bruno Pereira e Sara Andrade

2.10 Other Information
General information about CSIRT.UPORTO can be found at https://csirt.up.pt/.

2.11 Points of Customer Contact
CSIRT.UPORTO can be contacted by the means specified on section 2.4 and 2.6.


3. Charter

3.1 Mission Statement
CSIRT.UPORTO provides computer incident handling in the context of the University of Porto.

3.2 Constituency
The service fully supports the entire constituency of the University of Porto.

3.3 Sponsorship and/or Affiliation
CERT.PT is an integral service of CNCS.
CSIRT.UPORTO is a service integrated in the functional center - Universidade Digital (UPdigital), of the University of Porto Rectory.
Member of the Nacional CSIRT Network:
- - https://www.redecsirt.pt/
Member of TF-CSIRT
- - https://www.trusted-introducer.org/directory/teams/csirtuporto.html

3.4 Authority
The main purpose of CSIRT.UPORTO in incident handling is the coordination of incident response. As such, we can only advise our constituency and have no authority to demand certain actions.


4. Policies

4.1 Types of Incidents and Level of Support
CSIRT.UPORTO handles every type of cybersecurity incident, namely, those that result in a security violation of the following types:
a) Malicious Code
b) Availability
c) Information Gathering
d) Intrusion Attempt
e) Intrusion
f) Information Content Security
g) Fraud
h) Abusive Content
i) Vulnerable

4.2 Co-operation, Interaction and Disclosure of Information

4.3 Communication and Authentication
- - - - From the communication means made available by CSIRT.UPORTO, telephone and clear text email are considered safe for non-sensitive information. For sensitive information transmission it is required the use of PGP.


5. Services

5.1 Incident Response Coordination

5.2 On-Site Support

5.3 CSIRT Capability Building

5.4 Security Alerts

5.5 Proactive activities


6. Incident reporting forms
There are no local forms available.


7. Disclaimers
While every precaution will be taken in the preparation of information, notifications and alerts, CSIRT.UPORTO assumes no responsibility for errors or omissions, or for damages resulting from the use of the information contained within.
-----BEGIN PGP SIGNATURE-----

iQJEBAEBCAAuFiEE6pVS46NRLgfadUjMWIf+h2cQEAIFAl/XhjkQHGNzaXJ0QHVw
b3J0by5wdAAKCRBYh/6HZxAQAnZAD/sH9VjKFEWB1Zk4Zs4KbmsrQxQMEFlHYzqG
gP7O6nB7n0kJINF+/faDahHmRqRr28ABETLzW4ixj6XwNrhR10WC8kckuSu+LGOl
RPxCz1XxR2m/aSFLYcRCmcuqn0wNy8RdbR7l8Fjpn+/fcfUouiRT9GErQpzNPTRS
vVEVi/58Pvn+QYJzhRBk9Z5+ffugFSeq4ezkVO71pOpfzw1cLn8aOEEHFa9QXfwc
tIP+xfstEhmfDnDXNk0joh5SfsdqdVLkoflci5rjpZjbOV+xnb1dLlkvDZxuDALG
zEYAQo9kiPB7rHUNCSMyPqsHqG9z3kb6BCeR4KEBZ+uyXLmPAyhB3JB/G4TcVpc3
YJS5LhRk+1hmwMXGozPaN0R8dF+bmvqXwkt1mRgeTiVylt3/Me61IlQaTsGAuFy9
LypvKZPG6jNtBnwDCay+dLFfAc+8Jyz4QApfDWzOyL8wiHjA3zRtdpy7rH4og8rI
Mv/n64bbhzbZWxcogcDwAHw6a3vsTH9njupQ77wk+EJEtJXBe5SOD/qW/FNZ743n
CaKGA+2ZdzhtkqjZ/RCmN0wBiW1O/HL6lLXBuT63KTrfgyPnpMWPtZuf1BoWvx6F
cJShTnFLriHRoUSCgOtUDicIPaALiyDAECuZcAWxUY0M37TEWPoq2xpY+9Ph8QFI
LKTyOz5vSw==
=t7Ib
-----END PGP SIGNATURE-----