Each information system, as well as each state, is a potential victim of multiple changing threats. To improve their level of preparedness and efficiency, all CSIRTs – of private, commercial, or governmental/national constituencies – exchange information and feedback between trustworthy partners.
These exchanges aim to ensure a good level of trust and cooperation, and to improve the global threat landscape knowledge. They also help CSIRTs face incidents that affect their constituents or customers.
In order to share our information and knowledge as soon as possible, CERT-FR takes part in several CSIRT cooperation networks:
National or governmental CSIRTs cooperation networks
- CERT-FR is the French representative in the EU CSIRTs Network, which gathers all CSIRT teams with national competencies in the European Union.
- CERT-FR also takes part in other specific cooperation groups, allowing some states to exchange information multi-laterally, in Europe or worldwide.
Public-private partnerships
- In France, CERT-FR is a founding member of InterCERT France.
- Globally, CERT-FR is also a member of TF-CSIRT and FIRST, and regularly takes part in meetings of NatCSIRT.
Security and privacy of information exchanges
Information exchanges across these cooperation networks must respect strict privacy and security rules.
Members are required to use TLP (Traffic Light Protocol), allowing to make explicit with whom the information within a document can be shared, and to use secure exchange platforms and/or encryption and authentication mechanisms such as PGP whenever sensitive information is exchanged.
Furthermore, all information exchanges are done on a voluntary basis, and within strict respect of the confidentiality of incidents being handled, as well as the secrecy of investigation when these incidents are subject to legal proceedings.