[Ef] cybersecurity plans

[Nathaniel Mendoza]

Raphael if could add the following text that should be all we need. And please send me a copy. It then can submitted as an interim report in research.gov .

“Each NHERI awardee will participate in a NHERI security group with appropriate members from each site. This security group will ensure that best practices are flowed on Incident Response (IR), best practices, and security awareness.  In addition, a yearly audit of all NHERI resources will take place and a gap analysis will be created. Any findings in the gap analyses will be reviewed by the NHERI CISO and recommendations made for resolution of those gaps.”

Thanks
-nrm


From: Raphael Greenbaum <rgreenba at fiu.edu>
Date: Wednesday, October 26, 2016 at 7:40 AM
To: Nathaniel Mendoza <nmendoza at tacc.utexas.edu>, Tim Cockerill <cockerill at tacc.utexas.edu>, Experimental Facilities <ef at designsafe-ci.org>
Subject: Re: cybersecurity plans


Hi Nathaniel,



We have an internal meeting tomorrow, Thursday, afternoon to review what we have.  I'll be in touch with you after that .



Best,



Raphael Greenbaum, Ph.D.

Research Specialist

Wall of Wind, International Hurricane Research Center

Florida International University

________________________________
From: Nathaniel Mendoza <nmendoza at tacc.utexas.edu>
Sent: Monday, October 24, 2016 10:30:25 AM
To: Raphael Greenbaum; Tim Cockerill; Experimental Facilities
Subject: Re: cybersecurity plans


Raphael,
        If the CTSC stuff is too much just send what you have.



-nrm



From: Raphael Greenbaum <rgreenba at fiu.edu>
Date: Thursday, October 20, 2016 at 3:44 PM
To: Tim Cockerill <cockerill at tacc.utexas.edu>, Experimental Facilities <ef at designsafe-ci.org>
Cc: Nathaniel Mendoza <nmendoza at tacc.utexas.edu>
Subject: Re: cybersecurity plans



Hey Tim,



I skimmed through your cyber security plan (which I was unable to access through designsafe-ci.org, but I did download via cyberduck at

/gpfs/corral3/repl/projects/NHERI/shared/cockeril/NHERI Cybersecurity Plans/) and I am a little bit confused regarding the recommended content for the cybersecurity plan.



The recommendation all EF cybersecurity liaisons received from TACC on 9/28/2016 was to follow the CTSC's cybersecurity templates, which are significantly more detailed and comprehensive than the cybersecurity plan that you have.



Should we be following the CTSC's templates, with their 12 separate policy statements?



Best,



Raphael Greenbaum, Ph.D.

Research Specialist

Wall of Wind, International Hurricane Research Center

Florida International University

________________________________

From: EF <ef-bounces at designsafe-ci.org> on behalf of Tim Cockerill <cockerill at tacc.utexas.edu>
Sent: Thursday, October 20, 2016 3:30:30 PM
To: Experimental Facilities
Cc: Nathaniel Mendoza
Subject: [Ef] cybersecurity plans



To the best of my knowledge, we have not received anyone’s cybersecurity plans so that we can make them all consistent, compliant with our NSF Cooperative Agreements, and  also clearly define the coordination amongst the NHERI awardees.

I have a shared folder on the Data Depot where I have deposited my Cybersecurity Plan and you can also share yours - or you can send via email.



Tim Cockerill, PhD

DesignSafe Deputy Project Director

Director of Center Programs
Texas Advanced Computing Center
The University of Texas at Austin

512-471-8197 Office
217-714-0466 Cell
cockerill at tacc.utexas.edu<mailto:cockerill at tacc.utexas.edu>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.designsafe-ci.org/pipermail/ef/attachments/20161031/aeb741f9/attachment-0001.html>