1. National Authorities Ministry of Economic Affairs Ministry of the Interior and Kingdom Relations Ministry of Justice Team High Tech Crime AT (Agency for Telecoms) CBP (Data Protection Authority) OPTA (Independent Regulator for Post and Electronic Communications) NAVI (National Advisory Centre on Critical Infrastructure) GBO.Overheid ICTU and NICC CERTs GOVCERT.NL - Computer Emergency Response Team of the national Government of the Netherlands AMC-CERT - Academic Medical Center CERT, University of Amsterdam CERT-RU - Radboud University Nijmegen CERT CERT-RUG - Computing Center University of Groningen CERT CERT-UU - Computer Emergency Response Team - Universiteit Utrecht SURFcert - Computer Emergency Response Team of SURFnet UvA-CERT - Computer Emergency Response Team - University of Amsterdam ING Global CIRT - Computer Incident Response Team of ING global KPN-CERT - Computer Emergency Response Team of KPN RABOBANK SOC - Support Operation Centre of Rabobank AAB GCIRT - Global Computer Incident Response Team of ABN AMRO CERT-IDC - Computer Emergency Reponse Team of Energis IDC Industry Organisations ICT-Office VNO-NCW (Confederation of Netherlands Industry and Employers) NVB (The Netherlands Bankers Association) Academic Organisations SAFE-NL (platform for Security, Applications, Formal Aspects and Environments) ICT Regie Sentinels Nlnet Foundation NSVO (National Collaboration for Security Research) Others ECP-EPN (Electronic Commerce Platform - Platform for eNetherlands) ISSA NL OWASP NL

2. ISACA NL For contact details of the above-indicated stakeholders we refer to the ENISA Who is Who 2010 Directory on Network and Information Security and for the CERTs we refer to the ENISA CERT Inventory7. NOTE: only activities with at least a component of the following eight ENISA focus points have been taken into account when the stakeholders and their interaction were highlighted: CERT, Resilience, Awareness Raising, Emerging Risks/Current Risks, Micro- enterprises, e-ID, Development of Security, Technology and Standards Policy; Implementation of Security, Technology and Standards. http://www.enisa.europa.eu/act/cert/background/inv/certs-by-country National authorities in network and information security: role and responsibilities National authorities Role and responsibilities Website 1. Ministry of Economic Affairs Ministry of Economic Affairs is active regarding the development of the electronic communications market and IT, including network and information security www.minez.nl 2. Ministry of the Interior and Kingdom Relations The ministry of the Interior and Kingdom Relations (BZK) formulates policy, prepares legislation and regulations, and is also responsible for coordination, supervision and policy implementation. It has a principal role regarding steering and development of e-government within the Netherland, including governmental information security. The Comsec Agency (NBV) is part of the National Security Service (AIVD) of the Netherlands and advises the government, in particular on the security of sensitive information. The NBV evaluates and develops security products, and provides advice to potential users about their deployment. Furthermore the NBV applies its expertise to perform scientific research, provide policy advice, and participate in various fora regarding information security. Furhtermore the Ministry of the Interior is responsible for GovCert.nl and ICTU. www.minbzk.nl www.aivd.nl/@119035/nationaal-bureau 3. Ministry of Justice The Ministry of Justice has the principal role regarding NIS from the perspective of, NIS related law enforcement and combating cybercrime. www.minjus.nl 4. Team High Tech Crime

3. The Dutch Team High Tech Crime is a specific unit of the Dutch police which was founded to police networks and communication systems in the Netherlands, and tackle crimes using or directed against information and communication technology www.politie.nl/klpd 5. AT (Agency for Telecoms) AT is a governmental organisation for technicak support and advice on telecommunications policy and enforcement including the availability of the internation emergency number 112. As a specialised agency of the Ministry of Economic Affairs, the three main tasks of Agency for Telecommunications are to obtain, allocate and protect frequency space. www.agentschap-telecom.nl 6. CBP (Data Protection Authority) The CBP supervises the fair lawful use and security of personal data to ensure appropriate privacy and data protection in the Netherlands. The use of personal information should be reported to the CBP (unless there is a waiver for it). Furthermore the CBP performs several related activities such as regulation advice, awareness raising, mediation, treatment of complaints, etc. www.cbpweb.nl 7. OPTA (Independent Regulator for Post and Electronic Communications) OPTA regulates the telecommunications and postal industries within the Netherlands, and enforces legislation. OPTA works with various industry organisations (e.g. Internet providers) on information security measures and compliance with legislation and regulations in the areas of post and electronic communications, including regarding electronic signatures, spam and privacy. OPTA works with the Team High Tech Crime and Internet service providers to prevent and respond to Cyber Crime. www.opta.nl 8. NAVI National Advisory Centre on NAVI connects government and business stakeholders in the protection of the critical physical and digital infrastructure. Officials involved in the critical www.navi-online.nl Computer Emergency Response Teams (CERTs): roles and responsibilities With The Netherlands, several Computer Emergency Response Teams (CERTs) are active to effectively and efficiently respond to information security incidents. CERTs act as critical security service providers for the Government, Research & Education sector, or Private Companies. 11. GovCERT

4. GOVCERT.NL is the Computer Emergency Response Team of the national Government of the Netherlands. GOVCERT.NL is a central alert and information contact point on security incidents, alerts, hacks, errors, in applications and hardware. GOVCERT.NL informs and advises on security matters. GOVCERT.NL supports governments on prevention and handling of security incidents. www.govcert.nl 12. AMC-CERT AMC-CERT is the Academic Medical Center CERT, University of Amsterdam. www.amc.uva.nl/cert/ 13. CERT-RU CERT-RU is the Radboud University Nijmegen CERT (formerly CERT-KUN) http://www.ru.nl/cert 14. CERT-RUG CERT-RUG is the Computing Center University of Groningen CERT www.rug.nl/rc/security 15. CERT-UU CERT-UU is the Computer Emergency Response Team - Universiteit Utrecht www.cs.ruu.nl/cert-uu/ 16. SURFcert SURFnet CERT is the Computer Emergency Response Team of SURFnet. SURFnet is the Internet provider of the Dutch Higher Education institutes and many research organizations. http://cert.surfnet.nl 17. UvA-CERT UvA-CERT is the Computer Emergency Response Team - University of Amsterdam http://ic.uva.nl/cert 18. ING Global CIRT ING Global CIRT is the Computer Incident Response Team of ING global. ING is a global player active in the financial sector. http://www.ing.com 19. KPN-CERT KPN-CERT is the Computer Emergency Response Team of KPN. KPN is a ISP, Internet Service Provider, active in several countries around the world. www.kpn-cert.nl 20. RABOBANK SOC Rabobank Nederland SOC is the Support Operation Centre of Rabobank. Rabobank is

5. a global player active in the financial sector. www.rabobank.nl 21. CERT IDC CERT IDC is the Computer Emergency Reponse Team of Energis IDC. www.energis-idc.net 22. AAB GCIRT AAB GCIRT is the Global Computer Incident Response Team of ABN AMRO. ABN Amro is a global player active in the financial sector. www.abnamro.com/ Industry organisations active in network and information security: role and responsibilities 23. ICT-Office ICT-Office unites over 500 companies in the Dutch IT, Telecom, Office and Internet sectors. The most important issues on ICT-Offices agenda include innovation, the cooperation between industry and universities, the ICT labour market, global sourcing, tendering procedures, and fair market principles. Through active interest articulation and communication, the ICT-Office helps to ensure that the Dutch IT, Telecom and Office sectors retain and extend their competitive strength in a globalising world. The organisation has set up a working group on information security. www.ictoffice.nl 24. VNO-NCW (Confederation of Netherlands Industry and Employers) The Confederation of Dutch Industry and Employers (VNO-NCW) is the largest employers organization in the Netherlands. It represents the common interests of Dutch business, both at home and abroad, and provides a variety of member services. The confederation runs several coordination commissions, including specific ones aimed at improving legislation, implementation and enforcement regarding Information policy, cybercrime, privacy and telecommunications. Through collaboration with the government (EZ, BZK) strategic priorities are determined for future work.Through collaboration with ECP-ENL, guidance is provide to different stakeholders. www.vno-ncw.nl 25. NVB (The Netherlands Bankers Association) NVB represents common interests of the banking sector and strives towards a strong, healthy and internationally competive banking industry in the Netherlands. NVB runs and participates in several information security awareness campaigns, primarily from the perspective of safe Internet banking. They run the awareness websites 3xkloppen.nl and veiligbankieren.nl, and collaborate on Digibewust. www.nvb.nl www.3xkloppen.nl www.veiligbankieren.nl

6. Academic organisations active in network and information security: role and responsibilities 26. SAFE-NL (platform for Security, Applications, Formal Aspects and Environments) The platform for Security, Applications, Formal Aspects and Environments in The Netherlands (SAFE-NL) is the main community for R&D cooperation in ICT security. SAFE-NL provides a forum for researchers and practitioners from research institutions, industry and government agencies to exchange ideas on the state of the art in security technology, current and novel application areas of this technology, and on the requirements for effective deployment of secure systems. To this end, SAFE-NL organises informal one-day workshops on security in The Netherlands, provides a moderated public mailing list for the exchange of ideas over security, and maintains this community website to inform a larger public of its activities. The scope of SAFE NL includes: www.safe-nl.org -Algorithms, protocols and tools for security. -Secure system design. -Hardware security (e.g. smart cards). -Verification and validation methods for secure systems. -Data models and policies for secure systems. -Legal, social, organisational and economical aspects of security. 27. ICT Regie ICT Regie is the Netherlands ICT Research and Innovation Authority, aimed at strengthening the ICT knowledge infrastructure of the Netherlands and maximising the benefits for society and the economy. It stimulates, initiates and facilitates forms of cooperation (communities of interest, platforms) in which researchers, entrepreneurs and users jointly develop thematic strategic research agendas, including on IT security. www.ictregie.nl 28. Sentinels Sentinels is a Dutch research program on security in ICT, networks and information systems. The Sentinels program aims to give a very significant boost to security expertise in the Netherlands by providing and managing resources for scientific research in information security, by building a national IT-security community, and by disseminating the results into industry and government in the Netherlands. Sentinels is financed by three Dutch organizations: the Ministery of Economic Affairs, the Netherlands Organization for Scientific Research Governing Board (NWO-AB), and the Technology Foundation STW. www.sentinels.nl 29. Nlnet Foundation

7. The Nlnet foundation stimulates network research and development in the domain of Internet technology. It financially supports organization and people that contribute to an open information society. It funds software, events, educational activities and more, including in the areas of information security and privacy. NLnet Foundation tries to bridge the digital privacy divide by boosting confidentiality and standardisation of online communication. www.nlnet.nl 30. NSVO (National Collaboration for Security Research) Philips Research, TNO Information and Communication Technology, and the Centre of Telematics and Information Technology of Twente University have joined forces by initiating the NVSO (Nationaal samenwerkingsVerband Security Onderzoek National Security Knowledge Centre) with the ambitious plan of bridging the gap between the security research and the industrial security needs in the Netherlands. The aim of the NVSO is to develop a joint vision on security research in the Netherlands as well as to facilitate in the execution of this vision, in order to increase build-up and transfer of scientific knowledge in security on topics relevant for the Dutch Industry. Areas of relevant security that have been identified so far include: Secure Systems Engineering, Secure Information Management, Trust, Organizational Security, Security Applications, and Applied Cryptology. http://www.nvso.nl/ Other bodies and organisations active in network and information security: role and responsibilities 31. ECP-EPN (Electronic Commerce Platform Platform for eNetherlands) ECP-EPN is an Independent platform for the information society where the government, companies and organisations can collaborate and exchange knowledge. ECP-EPN runs various programs, including DigiVaardig & Digibewust. This program is an initiative from the government, the private sector and different organisations which aims for enabling the Dutch population to use digital solutions such as email, Internet, etc. Its objective is also creating awareness regarding security and the possible risks in the digital environment. ECP-EPN cooperates with Ejure, a Dutch centre of legal expertise on IT and the information society (www.ejure.nl). www.ecp.nl www.mijndigitalewereld. nl/ 32. ISSA NL The Information Systems Security Association (ISSA) is a not-for-profit, international organization of information security professionals and practitioners. The mission of the ISSA is to enhance the knowledge and skills of its, encourage exchange of information security techniques, approaches, and problem solving, be the global voice of the information security professional, and promote best practices in information security.

8. The Netherlands ISSA Chapter (ISSA NL) is an independent chapter of the Information Systems Security Association (ISSA). It facilitates, among other things, knowledge sharing events on various information security topics throughout the year in the Netherlands. www.issa-nl.org 33. OWASP NL The Open Web Application Security Project (OWASP) is an open-source application security project with local chapters. The OWASP community includes corporations, educational organizations, and individuals from around the world. This community works to create freely- available articles, methodologies, documentation, tools, and technologies. OWASP advocates approaching application security by considering the people, process, and technology dimensions. The chapter in the Netherlands organizes local events such as the OWASP NL Cafe, Mini- meetings, chapter meetings and specific events. www.owasp.nl 34. ISACA NL ISACA is a Worldwide association of IS professionals dedicated to the knowledge and good practices regarding audit, control, and security of information systems. The chapter in the Netherlands organizes local events such as education and training, workshops, roundtables and other specific events. www.isaca.nl Country specific NIS glossary AIVD National security agency BZK Ministry of the Interior and Kingdom relations CBP Data Protection Authority CPNI Centre for the protection of National Infrastructure DPA Data Protection Act EZ Ministry of Economic Affairs KLPD National Police NAVI National Advisory Centre on Critical Infrastructure NCC National Co-ordination Center NCO-T National Continuity Forum Telecommunications NICC National Infrastructure against Cybercrime NISCC National Infrastructure Security Co-ordination Centre NTD Notice-and-Take-Down NVB Netherlands Bankers Association NVSO National Security Knowledge Centre - Nationaal samenwerkingsVerband Security Onderzoek OPTA Independent regulator for post and electronic communications SAFE-NL Security, Applications, Formal Aspects and Environments SCADA Supervisory Control And Data Acquisition VNO-NCW Confederation of Dutch Industry and Employers

9. References An overview of the eGovernment and eInclusion situation in Europe, available at http://www.epractice.eu/en/factsheets Documents published by the National Advisory Centre on Critical Infrastructure (NAVI), available at: http://www.navi-online.nl European Commission, Europe's Digital Competitiveness Report, Volume 2: i2010 ICT Country Profiles available at http://ec.europa.eu/information_society/eeurope/i2010/key_documents/index_en.htm#EDCR Netherlands - ENISA CERT Directory: http://www.enisa.europa.eu/act/cert/background/inv/certs-by- country/netherlands See: www.veiliginternetten.nl

10. ENISA Vulnerability Notification List http://www.enisa.europa.eu/act/cert/support/guide2/annex/inf.-sources CERT Emergency Network NL http://staff.science.uva.nl/~delaat/sne-2006-2007/p23/report.pdf Strategie Nationale Veiligheid http://www.regionaalcrisisplan.nl/bestanden/file32028243.pdf http://www.rijksoverheid.nl/onderwerpen/crisis-en-nationale-veiligheid/strategie-nationale- veiligheid Nationaal CrisisCentrum / Landelijk Operationeel Coordinatiecentrum http://www.nationaalcrisiscentrum.nl/ http://www.loccnl.nl/ http://www.rijksoverheid.nl/onderwerpen/crisis-en-nationale-veiligheid/vraag-en-antwoord/wat-is- crisisbeheersing-en-welke-overheidsorganisaties-zijn-daarbij-betrokken.html Cyber Storm III: internationaal werken aan ICT-veiligheid http://www.nationaalcrisiscentrum.nl/nieuws/cyber-storm-iii-internationaal-werken-aan-ict- veiligheid Onderzeese Glasvezelkabels, Nationale Veiligheid en de Internationale Betrekkingen http://scripties.let.eldoc.ub.rug.nl/FILES/root/Master/DoorstroomMasters/InternationaleBetrek/20 10/B.Woord/Ma_-_1382756_-_B_Woord.pdf Meldpunt Cybercrime https://www.meldpuntcybercrime.nl/ CYCRIS Centre for Cybercrime Studies http://www.cycris.nl Openbaar Ministerie: Cybercrime http://www.om.nl/onderwerpen/cybercrime/ Politie Flevoland: Cybercrime op Internet http://www.politie.nl/flevoland/projecten/01cybercrimeopinternet.asp

11. Wilt u contact met de politie Flevoland over cybercrime, bel dan (0320) 266 705 of mailcybercrime@flevoland.politie.nl. Wij doen ons best uw vraag binnen drie werkdagen te beantwoorden. Politie: Meldpunt Cybercrime https://www.meldpuntcybercrime.nl/ Het Meldpunt Cybercrime (MCC) is bedoeld voor het maken van een melding van kinderporno terrorisme. U vult hiervoor een meldingsformulier Terrorisme of Kinderporno in. Voor overige meldingen kunt u terecht bij: Meld Misdaad Anoniem (anoniem informatie geven over ernstige misdrijven): 0800- 7000. Levensbedreigende situatie of andere noodsituatie: 112. Voor persoonlijk contact of het doen van aangifte, ga dan naar uw lokale politiebureau. U kunt kijken welk bureau bij u in de buurt is op www.politie.nl. Wilt u een banner of link van het MCC op uw website plaatsen, vul dan het contactformulier hieronder in onder vermelding van: Plaatsen banner MCC. Neem voor persvragen contact op met Bureau Communicatie van het Korps Landelijke politiediensten: 0343-535427. Nationaal Coordinator Terreurbestrijding http://www.nctb.nl/ Postbus 16950 2500 BZ Den Haag Tel: (070) 3 15 03 15 Algemene Inlichtingen & Veiligheidsdienst (AIVD) https://www.aivd.nl/ Bezoekadres* Europaweg 4 2711 AH Zoetermeer * Bezoekers dienen van tevoren aangemeld te worden. Het kantoor van de AIVD is volgens de wet een 'verboden plaats'. Dit houdt in dat het zich illegaal of ongewenst op zo'n plaats bevinden een misdrijf is.

12. Postadres Ministerie van Binnenlandse Zaken en Koninkrijksrelaties Postbus 20010 2500 EA Den Haag Telefoon en fax Telefoonnummer: 079 - 320 50 50 Faxnummer: 070 - 320 07 33 Militaire Inlichtingen- en Veiligheidsdienst http://www.defensie.nl/mivd/ Militaire Inlichtingen- en Veiligheidsdienst Postbus 20701 2500 ES Den Haag Tel. (070) 441 90 27 E-mail: mivd@mindef.nl Nuansa Kennis- en Adviescentrum Polarisatie en Radicalisatie http://www.nuansa.nl/ Per email: vraag@nuansa.nl Per telefoon: (020) 692 09 14 Per post: Veemarkt 83 1019 DB Amsterdam Op bezoek (op afspraak): Veemarkt 83 1019 DB Amsterdam Commissie van Toezicht Betreffende de Inlichtingen- en Veiligheidsdiensten http://www.ctivd.nl/ Commissie van Toezicht betreffende de Inlichtingen- en Veiligheidsdiensten Anna van Saksenlaan 50 2593 HT Den Haag Telefoon: 070 - 315 5820 Email: info@ctivd.nl.

13. Meldpunt Identiteitsfraude http://www.rijksoverheid.nl/onderwerpen/cybercrime/documenten-en-publicaties/publicaties- pb51/meldingsformulier-identiteitsfraude.html Meldpunt Discriminatie Internet http://www.meldpunt.nl / meldpunt@meldpunt.nl Meldpunt Kinderporno http://www.meldpunt-kinderporno.nl/ Meldpunt Kinderporno op Internet Hooglandse Kerkgracht 17j 2312 HT Leiden Woordvoering Meldpunt tel: 071 5135049 Voor overige vragen: info@meldpunt-kinderporno.nl MinV&W Departementaal Coordinatiecentrum Crisisbeheersing http://www.dccvenw.nl/ Koningskade 4 2596 AA Den Haag Postbus 20906 2500 EX Den Haag Tel.: 070 - 351 85 55 Fax: 070 - 351 80 60 Email: info@dccvenw.nl NEN Maatschappelijke Veiligheid http://www.maatschappelijkeveiligheid.nl/ Neem voor meer informatie contact met ons op. Stuur een mail naar maatschappelijke.veiligheid@nen.nl of vul het contactformulier in. Adviescentrum BVI (Bescherming Vitale Infrastructuur) http://www.adviescentrumbvi.nl/ Lange Voorhout 9 2514 EA Den Haag

14. T: 070 376 5886 E: info@ adviescentrumBVI.nl Unit 10 Digitaal Onderzoek Portal http://www.unit10.nl/links.htm Portaal Informatiebeveiliging http://www.xs4all.nl/~rvy/ib-index.html

15. National Computer Security Incident Response Teams The following CSIRTs have responsibility for an economy or a country. Argentina (AR) ArCERT Computer Emergency Response Team of the Argentine Public Administration http://www.arcert.gov.ar/ Contact: ArCERT Austria (AT) CERT.at National Computer Emergency Response Team of Austria http://www.cert.at/index_en.html Contact: CERT.at Australia (AU) CERT Australia Australia's National Computer Emergency Response Team http://www.cert.gov.au/ Contact: CERT Australia Belgium (BE) CERT.be Belgian National Computer Emergency Response Team http://www.cert.be Contact: CERT.be Brazil (BR) CERT.br Brazilian National Computer Emergency Response Team http://www.cert.br Contact: CERT.br Brazil (BR) CTIR Gov Computer Security and Incident Response Team - Brazilian Federal Government http://www.ctir.gov.br/index_en.html Contact: CTIR Gov Brunei Darussalam (BN) BruCERT Brunei Computer Emergency Response Team http://www.brucert.org.bn/ Contact: BruCERT Cambodia (KH) CamCERT National Cambodia Computer Emergency Response Team

16. http://www.camcert.gov.kh/ Contact: CamCERT Canada (CA) CCIRC Canadian Cyber Incident Response Centre http://www.publicsafety.gc.ca/prg/em/ccirc/index-eng.aspx Contact: CCIRC Chile (CL) CLCERT Chilean Computer Emergency Response Team http://www.clcert.cl Contact: CLCERT China (CN) CNCERT/CC National Computer Network Emergency Response Technical Team - Coordination Center of China http://www.cert.org.cn/ Contact: CNCERT/CC Denmark (DK) DK-CERT Danish Computer Emergency Response Team https://www.cert.dk Contact: DK-CERT Estonia (EE) CERT-EE CERT Estonia http://www.cert.ee/ Contact: CERT-EE Finland (FI) CERT-FI Finnish Communications Regulatory Commission http://www.cert.fi/ Contact: CERT-FI France (FR) CERTA Centre d'Expertise Gouvernemental de Rponse et de Traitement des Attaques informatiques http://www.certa.ssi.gouv.fr/ Contact: CERTA Germany (DE) CERT-Bund Computer Emergency Response Team fr Bundesbehrden

17. http://www.bsi.bund.de/certbund/ Contact: CERT-Bund Hong Kong (HK) HKCERT Hong Kong Computer Emergency Response Coordination Centre http://www.hkcert.org/ Contact: HKCERT Hungary (HU) CERT-Hungary CERT-Hungary http://www.cert-hungary.hu/ Contact: CERT-Hungary Japan (JP) JPCERT/CC Japan Computer Emergency Response Team Coordination Center http://www.jpcert.or.jp/ Contact: JPCERT/CC Japan (JP) NISC National Information Security Center http://www.nisc.go.jp/eng/index.html Contact: NISC Lithuania (LT) CERT LT Lithuanian National Computer Emergency Response Team https://www.cert.lt/en/index.html Contact: CERT LT Luxembourg (LU) CIRCL Computer Incident Response Centre Luxembourg http://www.circl.lu/ Contact: CIRCL Malaysia (MY) MyCERT Malaysian Computer Emergency Response Team http://www.cybersecurity.my/en// Contact: MyCERT Mauritius (MU) CERT-MU Mauritian National Computer Security Incident Response Centre http://www.cert-mu.org.mu/ Contact: CERT-MU

18. Myanmar (MM) mmCERT Myanmar Computer Emergency Response Team http://www.mmcert.org.mm/ Contact: mmCERT Netherlands (NL) GOVCERT.NL Computer Emergency Response Team for the Dutch Government http://www.govcert.nl/ Contact: GOVCERT.NL New Zealand (NZ) CCIP Centre for Critical Infrastructure Protection http://www.ccip.govt.nz/ Contact: CCIP Norway (NO) NorCERT Norwegian Computer Emergency Response Team http://www.cert.no Contact: NorCERT Oman (OM) Oman National CERT Oman National Computer Emergency Readiness Team http://www.cert.gov.om/ Contact: Oman National CERT Philippines (PH) PH-CERT Philippine Computer Emergency Response Team http://www.ph-cert.org/ Contact: PH-CERT Poland (PL) CERT Polska Computer Emergency Response Team Polska http://www.cert.pl/ Contact: CERT Polska Portugal (PT) CERT.PT CERT.PT http://www.cert.pt/ Contact: CERT.PT Qatar (QA) Q-CERT

19. Supreme Council for Information and Communications Technology, ictQATAR http://www.qcert.org Contact: Q-CERT Saudi Arabia (SA) CERT-SA Computer Emergency Response Team Saudi Arabia http://www.cert.gov.sa/ Contact: CERT-SA Singapore (SG) SingCERT Singapore Computer Emergency Response Team http://www.singcert.org.sg/ Contact: SingCERT Slovenia (SI) SI-CERT Slovenian Computer Emergency Response Team http://www.arnes.si/english/si-cert/ Contact: SI-CERT South Korea (KR) KrCERT/CC CERT Coordination Center Korea http://www.krcert.or.kr/ Contact: KrCERT/CC Spain (ES) CCN-CERT Cryptology National Center - Computer Security Incident Response Team https://www.ccn-cert.cni.es/ Contact: CCN-CERT Spain (ES) INTECO-CERT INTECO IT Incident Response Center http://www.inteco.es/rssRead/Seguridad/INTECOCERT Contact: INTECO-CERT Spain (ES) RedIRIS-CERT Spanish National Research Network Computer Emergency Response Team http://www.rediris.es/ Contact: RedIRIS-CERT Sweden (SE) SITIC Swedish IT Incident Centre

20. http://www.sitic.se Contact: SITIC Switzerland (CH) SWITCH-CERT Swiss Education and Research Network Computer Emergency Response Team http://www.switch.ch/security/incident-handling/ Contact: SWITCH-CERT Taiwan (TW) TWNCERT Taiwan National Computer Emergency Response Team http://www.twncert.org.tw/ Contact: TWNCERT Thailand (TH) ThaiCERT Thai Computer Emergency Response Team http://www.thaicert.nectec.or.th/ Contact: ThaiCERT Tunisia (TN) tunCERT Tunisian Computer Emergency Response Team http://www.ansi.tn/en/about_cert-tcc.htm Contact: tunCERT Turkey (TR) TR-CERT Turkey Computer Emergency Response Team http://www.tr-cert.org/ Contact: TR-CERT Ukraine (UA) CERT-UA Computer Emergency Response Team Ukraine http://www.cert.gov.ua/?lang=eng Contact: CERT-UA United Arab Emirates (AE) aeCERT The United Arab Emirates Computer Emergency Response Team http://www.aecert.ae/ Contact: aeCERT United Kingdom (UK) GovCertUK GovCertUK http://www.govcertuk.gov.uk/ Contact: GovCertUK

21. United Kingdom (UK) CPNI Centre for the Protection of National Infrastructure http://www.cpni.gov.uk/ Contact: CPNI United States (US) US-CERT United States - Computer Emergency Readiness Team http://www.us-cert.gov Contact: US-CERT Uruguay (UY) CERTuy Uruguay - CERT http://www.cert.uy Contact: CERTuy Viet Nam (VN) VNCERT Viet Nam CERT http://www.vncert.gov.vn/ Contact: VNCERT

22. Nationaal Adviescentrum Nationale Infrastructuur Telefoon Telefoon: (070) 376 59 50 tussen 09.00-17.00 uur Adres en route Bezoekadres NAVI Lange Voorhout 13 2514 EA Den Haag Postadres NAVI Postbus 20011 2500 EA Den Haag Website: http://www.navi.nl Linkedin: http://www.linkedin.com/companies/nationaal-adviescentrum-vitale-infrastructuur-navi- Zie ook: Samenvoeging NAVI met GOVCERT.NL en NICC https://www.navi-online.nl/Actueel/NieuwsItem/id/80 TNO Veiligheid: Bescherming Vitale Infrastructuur Drs. ing. C.W. (Kees) d' Huy 070 374 00 21 Contactgegevens T 070 374 00 00 F 070 328 09 61 E info-DenV@tno.nl Oude Waalsdorperweg 63 2597 AK Den Haag Postbus 96864 2509 JG Den Haag Website: http://www.tno.nl/content.cfm?context=markten&content=product&laag1=194&laag2=195&item_ id=666 Welcome to Sentinels, a Dutch security research program

23. Sentinels is a Dutch research program on security in ICT, networks and information systems. The Sentinels program aims to give a very significant boost to security expertise in the Netherlands by providing and managing resources for scientific research in information security, by building a national IT-security community, and by disseminating the results into industry and government in the Netherlands. Sentinels is being financed by three Dutch organizations: the Ministery of Economic Affairs, the Netherlands Organization for Scientific Research Governing Board (NWO-AB), and the Technology Foundation STW. Sentinels Program Office Technology Foundation STW Dr. Rik D.T. Janssen Van Vollenhovelaan 661 3527 JP Utrecht The Netherlands PO.Box 3021 3502 GA Utrecht The Netherlands phone: (+31) (0)30 6001283 fax: (+31) (0)30 6014408 email: info@sentinels.nl email webmaster: webmaster@sentinels.nl website: www.sentinels.nl Chairman Sentinels Prof.dr. Willem Jonker (Philips Research Laboratories & University of Twente) phone: (+31) (0)40 2747924 email: willem.jonker@philips.com Waarschuwingsdienst Heb je vragen over Waarschuwingsdienst.nl of een van onze adviezen? Neem dan contact met ons op via info@waarschuwingsdienst.nl. Je krijgt binnen 5 werkdagen antwoord. (Ministerie van Binnenlandse Zaken) Website: http://www.waarschuwingsdienst.nl/ GovCERT Website: http://www.govcert.nl/ Bezoekadres: Wilhelmina van Pruisenweg 104

24. 2595 AN Den Haag Routebeschrijving Postadres: Postbus 84011 2508 AA Den Haag Telefoon: (070) 888 75 55 Fax: (070) 888 75 50 E-mail: info@govcert.nl Cybercrime en NICC: Samen tegen Cybercrime Bezoekadres Wilhelmina van Pruisenweg 104 2595 AN Den Haag Postadres Postbus 84011 2508 AA Den Haag Telefoon (070) 888 79 46 E-mail nicc@ictu.nl Programmamanager: Annemarie Zielstra http://www.samentegencybercrime.nl/ DIGID Digid Veiligheid Website: http://www.digid.nl/veiligheid Digid Contact Info: http://www.digid.nl/contact/ Nederlands English

25. Welcome to www.CERT.nl www.CERT.nl is the portal site for Computer Emergency Response Teams in the Netherlands. The domain name "CERT.nl" has been assigned within the Top Level Domain ".nl" for the purpose of serving as a neutral starting point for links to Computer Security Incident Response Teams (CSIRTs), which, for historical reasons, are sometimes referred to as Computer Emergency Response Teams (CERTs). Various CERTs in the Netherlands are therefore currently in the process of drafting guidelines according to which the site will offer proper and relevant information. www.CERT.nl is maintained by GOVCERT.NL, the Dutch central government CSIRT. Questions and comments may be directed to portal@cert.nl. AAB-GCIRT ABNAMRO bank N.V. Constituency: Financial institute Website: http://www.abnamro.com/ E-mail: abn.gcirt@abnamro.com PGP key: 0xEF082895 BIT BV Security Team BIT BV Constituency: Networks in AS-BIT Website: http://www.bit.nl E-mail: cert@bit.nl PGP key: 0x4FAA6BDADDFCC73C Edutel Security Team Edutel B.V. Customers of Edutel and Edutel internal Doelgroep: networks

26. Website: http://www.edutel.nl E-mail: security@edutel.nl PGP- 0x0A039347 sleutel: GOVCERT.NL The Ministry of the Interior and Kingdom Relations Governmental Institutions of The Constituency: Netherlands Website: http://www.govcert.nl/ E-mail: cert@govcert.nl PGP key: 0xC3D62A13 KPN-CERT Koninklijke KPN N.V. 1. KPN Constituency: 2. The customers of KPN Website: http://www.kpn-cert.nl/ E-mail: cert@kpn-cert.nl PGP key: 0xF6FE02A9 SURFcert SURFnet B.V. Constituency: All sites connected to SURFnet Website: http://cert.surfnet.nl/

27. E-mail: cert@surfnet.nl PGP key: 0xEA137DFC UPC / Chello Security team UPC Broadband N.V. Constituency: UPC / Chello networks Website: http://www.chello.com/ E-mail: security@chello.com PGP key: 0x341C9092

28. Alphabetical list of FIRST Members This is a list of the contact information for incident response teams participating in FIRST, the Forum of Incident Response and Security Teams. The teams are responsible for providing FIRST with their latest contact information for this page. The list is alphabetized by team name. All telephone numbers are preceded with the appropriate country code. Team Official Team name AAB GCIRT ABN AMRO Global CIRT ACERT Army Emergency Response Team ACOnet-CERT ACOnet-CERT AFCERT Air Force CERT ASEC AhnLab Security E-response Center AT&T AT&T AboveSecCERT Above Security Computer Emergency Response Team Adobe PSIRT Adobe Product Security Incident Response Team Apple Apple Computer Computer Emergency Response Team of the Argentine Public ArCERT Administration AusCERT Australian Computer Emergency Response Team BACIRT Bank of America Computer Incident Response Team BCERT Boeing CERT BELNET CERT BELNET CERT BFK BFK edv consulting BIRT BrandProtect IRT BMO ISIRT BMO InfoSec Incident Response Team BP DSAC BP Digital Security Alert Centre BTCERTCC British Telecommunications CERT Co-ordination Centre BadgIRT University of Wisconsin-Madison Bell IPCR Bell Canada Information Protection Centre (IPC) Response

29. Bunker The Bunker Security Team CAIS/RNP Brazilian Academic and Research Network CSIRT CARNet CERT CARNet CERT CC-SEC Cablecom Security Team CCIRC Canadian Cyber Incident Response Centre CCN-CERT (Spanish Government National Cryptologic Center - CCN-CERT Computer Security Incident Response Team) CDI-CIRT Cyber defense institute Incident Response Team CERT BWI CERT BWI CERT NIC.LV CERT NIC.LV CERT POLSKA Computer Emergency Response Team Polska CERT SG CERT Societe Generale CERT-Bund CERT-Bund CERT-EE CERT Estonia CERT-FI CERT-FI CERT-Hungary Hungarian governmental Computer Emergency Response Team CERT-In Indian Computer Emergency Response Team CERT-LT Lithuanian National Computer Emergency Response Team CERT-Renater CERT-Renater CERT-UA Computer Emergency Response Team of Ukraine CERT-VW CERT-VW CERT.at CERT.at CERT.br Computer Emergency Response Team Brazil CERT/CC CERT Coordination Center CERTA CERT-Administration CERTBw Computer Emergency Response Team Bundeswehr

30. CERTGOVIL Israeli Government CERT CFC Cyber Force Center CGI CIRT CGI Computer Incident Response Team Canadian Imperial Bank of Commerce - Computer Incident CIBC Response Team CLCERT Chilean Computer Emergency Response Team China Mobile Computer Network Emergency Response Technical CMCERT/CC Team /Coordination Center National Computer Network Emergency Response Technical Team CNCERT/CC / Coordination Center of China ANTEL's Computer and Telecommunications Security Incident CSIRT ANTEL Response Centre CSIRT.DK Danish Computer Security Incident Repsonse Team CSIRTBANELCO BANELCO Computer Security Incident Response Team CSIRTUK CSIRTUK Cert-IST CERT France Industries, Services & Tertiaire Cisco PSIRT Cisco Systems Product Security Incident Response Team Cisco Systems Cisco Systems CSIRT Citi CIRT Citi CIRT ComCERT Commerzbank CERT CyberCIRT Cyberklix Computer Incident Response Team DANTE Delivery of Advanced Network Technology to Europe Limited DCSIRT Diageo CSIRT DFN-CERT DFN-CERT DIRT DePaul Incident Response Team DK-CERT Danish Computer Emergency Repsonse Team DOE-CIRC Department of Energy Cyber Incident Response Capability DnB NOR IRT DnB NOR Security Incident Response Team

31. E-CERT Energis Computer Emergency Response Team Electronic Communications Security - Computer Security Incident ECS-CSIRT Response Team EDS EDS EMC EMCs Product Security Response Center ESACERT ESA Computer and Communications Emergency Response Team ETISALAT-CERT ETISALAT Computer Emergency Response EWA- EWA-Canada / Canadian Computer Emergency Response Team Canada/CanCERT EYCIRT Ernst & Young Computer Incident Response Team Ericsson PSIRT Ericsson Product Security Incident Response Team FORTHcert Foundation for Research and Technology, Hellas, CERT FSC-CERT CERT of Fujitsu Technology Solutions FSIRT FIS Security Incident Response Team FSLabs F-Secure Security Labs Funet CERT Funet CERT GD-AIS General Dynamics - AIS GE-CIRT General Electric Computer Incident Response Team GIST Google Information Security Team GOVCERT.NL GOVCERT.NL GTCERT Georgia Institute of Technology CERT Goldman Sachs Goldman, Sachs and Company GovCERT.ch Computer Emergency Response Team of the Swiss Government GovCertUK CESGs Government Computer Emergency Response Team HIRT Hitachi Incident Response Team Hong Kong Computer Emergency Response Team Coordination HKCERT Centre

32. HP SSRT HP Software Security Response Team HR-CERT Croatian National CERT HSBC REACT Rapid Emergency Action Crisis Team IBM IBM IID Internet Identity IIJ-SECT IIJ Group Security Coordination Team ILAN-CERT Israeli Academic CERT ING Global CIRT ING Global CIRT INTECO-CERT INTECO IT Incident Response Center IP+ CERT IP-Plus CERT IPA-CERT IPA-CERT IRIS-CERT IRIS-CERT ISIRT INTERPOL INFORMATION SECURITY INCIDENT RESPONSE ISPIRIT Barclays Information Security and Privacy IT-ISAC Information Technology Information Sharing and Analysis Center Infosec-CERT Infosec Computer Emergency Response Team Intel FIRST Team Intel FIRST Team JANET CSIRT JANET CSIRT JPCERT/CC JPCERT Coordination Center JPMC CIRT JPMorgan Chase Computer Incident Response Team JSOC Japan Security Operation Center Juniper SIRT Juniper Networks Security Incident Response Team KDDI-SOC KDDI Security Operations Center KF/ISAC Korea Financial Information Sharing & Analysis Center KFCERT Korea Financial Computer Emergency Response Team KIT-CERT Karlsruhe Institute of Technology Computer Emergency Response

33. Team KKCSIRT Kakaku.com Security Incident Response Team KMD IAC KMD Internet Alarm Center KN-CERT Korea National Computer Emergency Response Team KPN-CERT Computer Emergency Response Team of KPN KrCERT/CC KrCERT/CC LITNET CERT LITNET CERT MCI VzB NSIRT MFCIRT McAfee Computer Incident Response Team MIXIRT mixi Incident Response Team MODCERT MOD Computer Emergency Response Team MSCERT Microsoft Security Response Center Team MSIRT Moneris Solutions Incident Response Team MyCERT Malaysian Computer Emergency Response Team NAB ITSAR National Australia Bank - IT Security Assessments and Response NASA SOC NASA Security Operations Center NATO Computer Incident Response Capability - Coordination NCIRC CC Center NCSA-IRST National Center for Supercomputing Applications IRST NRI SecureTechnologies Computer Security Incident Response NCSIRT Team NGFIRST Northrop Grumman Corporation FIRST NIHIRT NIH Incident Response Team NISC National Information Security Center NIST NIST IT Security NN FIRST Team Nortel FIRST Team NORDUnet NORDUnet

34. NTT Computer Security Incident Response and Readiness NTT-CERT Coordination Team NU-CERT Northwestern University NUSCERT NUS Computer Emergency Response Team NeuCERT Neustar Computer Emergency Response Team NorCERT Norwegian Computer Emergency Response Team OCERT Oman National CERT OISIR World Bank Group Office of Information Security Incident Response ORACERT Oracle Global Security Team OS-CIRT Open Systems AG Computer Incident Response Team OSU-IRT The Ohio State University Incident Response Team OxCERT Oxford University IT Security Team P-CIRF Portcullis Computer Incident Response and Forensics Team PRE-CERT PRE-CERT Panasonic PSIRT Panasonic Product Security Incident Response Team Pentest Pentest Security Team Q-CERT Qatar CERT Q-CIRT QinetiQ Computer Incident Response Team R-IT CERT Raiffeisen Informatik CERT RABOBANK SOC Rabobank Nederland SOC RBC FG CSIRT RBC Financial Group CSIRT RBSG Royal Bank of Scotland, Investigation and Threat Management Research In Motion, Corporate Security - Information Security RIM CS-ISOC Operations Centre RM CSIRT ROYAL MAIL CSIRT CC RU-CERT Computer Security Incident Response Team RU-CERT RUS-CERT Stabsstelle DV-Sicherheit der Universitaet Stuttgart

35. Rakuten-CERT Rakuten-CERT Ricoh PSIRT Ricoh Product Security Incident Response Team S-CERT CERT of the German Savings Banks Organization SAFCERT Singapore Armed Forces Computer Emergency Response Team Science Applications International Corporation - Incident Response SAIC-IRT Team SAP CERT SAP AG CERT SBCSIRT Softbank Telecommunications Security Incident Response Team SI-CERT Slovenian CERT SIRCC Security Incident Response Control Center SITIC Swedish IT Incident Centre SKY-CERT Skype Computer Emergency Response Team SLCERT Sri Lanka Computer Emergency Response Team SUNet-CERT SUNet-CERT SURFcert SURFcert SWAT A.P.Moller-Maersk Group IT-Security SWAT SWITCH-CERT Swiss Education and Research Network CERT SWRX CERT SecureWorks Computer Emergency Response Team Secunia Research Secunia Research Shell SecOps Shell IT Security Operations Team Siemens-CERT Siemens-CERT SingCERT Singapore CERT Stanford Stanford University Information Security Services Sun Sun Microsystems, Inc. SymCERT Symantec Computer Emergency Response Team TDBFG CSIRT TDBFG Computer Security Incident Response Team

36. TERIS Telefonica del Peru Computer Security Incidents Response Team TESIRT TELMEX Security Incident Response Team TS-CERT TeliaSoneraCERT CC TS/ICSA FIRST TruSecure Corporation TWCERT/CC Taiwan Computer Emergency Response Team/Coordination Center TWNCERT Taiwan National Computer Emergency Response Team TWSL-CIRT Trustwave SpiderLabs CIRT Team Cymru Team Cymru Telekom-CERT Telekom-CERT ThaiCERT Thai Computer Emergency Response Team UB-First UB-First UCERT Unisys CERT UM-CERT University of Michigan CERT UNAM-CERT UNAM-CERT UNINETT CERT UNINETT CERT US-CERT United States Computer Emergency Readiness Center Uchicago Network The University of Chicago Network Security Center Security UiO-CERT University of Oslo Computer Emergency Response Team VISA-CIRT VISA-CIRT Sistema Nacional de Gestin de Incidentes Telemticos (Computer VenCERT Incident Management National System VeriSign VeriSign YIRD Yahoo Incident Response Division aeCERT The United Arab Emirates - Computer Emergency Response Team dCERT debis Computer Emergency Response Team dbCERT Deutsche Bank Computer Emergency Response Team

37. e-Cop e-Cop Pte Ltd e-LC CSIRT e-LaCaixa CSIRT esCERT-UPC CERT for the Technical University of Catalunya secu-CERT SECUNET CERT tunCERT Tunisian Computer Emergency Response Team ENISA: European CERT Index http://web.archive.org/web/20060717211903/http://enisa.europa.eu/doc/pdf/deliverables/enisa_ cert_inventory_v1.2_060210.pdf