CERT-TMPL

RFC 2350

Version: 1.0

Date: 18 Jul 2018

1. Document information

This document contains a description of CERT-TMPL according to RFC 2350. It provides basic information about the CERT TMPL, the ways it can be contacted, describes its responsibilities and the services offered.

1.1 Date of last update

14 Jan 2022

1.2 Distribution list for notifications

There is no distribution list for notifications as of 04.07.2018.

1.3 Locations where this document may be found

The current version of this document can always be found at: https://cert.t-mobile.pl/

2. Contact information

2.1 Name of the team

Short team name: CERT-TMPL

Official team name: CERT T-Mobile Polska

2.2 Address

Tribe Security

T-Mobile S.A.

Marynarska 12 Street

02-674 Warszawa

POLAND

2.3 Time zone

Central European time zone (CET). GMT+01.00 (+02.00 during summer time).

2.4 Telephone number

+ 48 602 900 000

2.5 Other telecommunication

None.

2.6 Electronic mail address

cert[at]t-mobile.pl

2.7 Public keys and encryption information

2.8 Team members

No public information is provided about team members

2.9 Other information

CERT-TMPL operates within T-Mobile Polska.

https://cert.t-mobile.pl/

2.10 Points of customer contact

cert[at]t-mobile.pl

24 hours, 7 days a week - duty 1st line officers

9am-7pm, Monday-Friday 2nd and 3rd line incident handlers

3. Charter

3.1 Mission statement

CERT-TMPL mission is to provide high quality monitoring and incident management services for its constituency along with contributing to the security community by sharing information, experience and knowledge.

3.2 Constituency

Constituency consists of the institutions/companies who sign an agreement to use CERT-TMPL security management services. CERT TMPL constituency is based on confidential agreements.

3.3 Sponsorship and/or affiliation

CERT-TMPL is an initiative of T-Mobile Polska, Tribe Security (http://www.t-mobile.pl/).

3.4 Authority

CERT-TMPL operates under the auspices of, and with authority delegated by T-Mobile Polska (official documentation). The detailed scope of authority towards the constituency is included in confidential agreements.

4. Policies

4.1 Co-operation, interaction and disclosure of information

CERT-TMPL cooperates with:

Abuse Forum (Polish Forum for Incident Response Teams)
NCCyber (National Cybersecurity Center in Poland)
ETIS (The Community for Telecom Professionals)

CERT TMPL is listed within TF-CSIRT since April 2018, as for 04.07.2018, pursuing for accreditation.

All secure data when transmitted to its partners is encrypted or/and transmitted over secure environment.

4.2 Communication and authentication

CERT TMPL uses PGP as well as TLP-Traffic Light Protocol:
RED - personal for named recipients only
AMBER - limited distribution
GREEN - community wide
WHITE - unlimited, may be distributed freely, without restriction.

5. Services

Reactive services:

alerts and warnings
artifact analysis
artifact response
forensic analysis
incident analysis
incident response
incident response support
vulnerability analysis
vulnerability response

Proactive services:

announcements
intrusion detection services
security-related information dissemination
technology watch

Security quality management services:

awareness building
education/training
risk analysis
security consulting

6. Incident reporting forms

There are no local forms available.

7. Disclaimer

Every precaution will be taken in the preparation of information, notifications, alerts and other services. CERT-TMPL assumes no responsibility for errors or omissions, or for damages resulting from the use of the information contained within.