CERT-TMPL

RFC 2350

Version: 1.0

Date: 18 Jul 2018

Author: Filip Rejch

1. Document information

This document contains a description of CERT-TMPL according to RFC 2350. It provides basic information about the CERT TMPL, the ways it can be contacted, describes its responsibilities and the services offered.

1.1 Date of last update

18 Jul 2018

1.2 Distribution list for notifications

There is no distribution list for notifications as of 04.07.2018.

1.3 Locations where this document may be found

The current version of this document can always be found at: https://cert.t-mobile.pl/

2. Contact information

2.1 Name of the team

Short team name: CERT-TMPL

Official team name: CERT T-Mobile Polska

2.2 Address

Dział Bezpieczeństwa Technologicznego

T-Mobile S.A.

Marynarska 12 Street

02-674 Warszawa

POLAND

2.3 Time zone

Central European time zone (CET). GMT+01.00 (+02.00 during summer time).

2.4 Telephone number

+ 48 602 404 898

2.5 Other telecommunication

None.

2.6 Electronic mail address

cert[at]t-mobile.pl

2.7 Public keys and encryption information

-----BEGIN PGP PUBLIC KEY BLOCK-----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=QLpW
-----END PGP PUBLIC KEY BLOCK-----

2.8 Team members

No public information is provided about team members

2.9 Other information

CERT-TMPL operates within T-Mobile Polska.

https://cert.t-mobile.pl/

2.10 Points of customer contact

cert[at]t-mobile.pl

24 hours, 7 days a week - duty 1st line officers

9am-7pm, Monday-Friday – 2nd and 3rd line incident handlers

3. Charter

3.1 Mission statement

CERT-TMPL mission is to provide high quality monitoring and incident management services for its constituency along with contributing to the security community by sharing information, experience and knowledge.

3.2 Constituency

Constituency consists of the institutions/companies who sign an agreement to use CERT-TMPL security management services. CERT TMPL constituency is based on confidential agreements.

3.3 Sponsorship and/or affiliation

CERT-TMPL is an initiative of T-Mobile Polska, Security Department (http://www.t-mobile.pl/).

3.4 Authority

CERT-TMPL operates under the auspices of, and with authority delegated by T-Mobile Polska (official documentation). The detailed scope of authority towards the constituency is included in confidential agreements.

4. Policies

4.1 Co-operation, interaction and disclosure of information

CERT-TMPL cooperates with:

CERT TMPL is listed within TF-CSIRT since April 2018, as for 04.07.2018, pursuing for accreditation.

All secure data when transmitted to its partners is encrypted or/and transmitted over secure environment.

4.2 Communication and authentication

CERT TMPL uses PGP as well as TLP-Traffic Light Protocol:
RED - personal for named recipients only
AMBER - limited distribution
GREEN - community wide
WHITE - unlimited, may be distributed freely, without restriction.

5. Services

Reactive services:

Proactive services:

Security quality management services:

6. Incident reporting forms

There are no local forms available.

7. Disclaimer

Every precaution will be taken in the preparation of information, notifications, alerts and other services. CERT-TMPL assumes no responsibility for errors or omissions, or for damages resulting from the use of the information contained within.