METRICA-SEC FP7-ICT-SEC-2007-1 - Joint Call ICT Security 1 29Nov07

Leadership
So far,leadership is hold by tb-security,but since it is a SME,maybe we should
encourage a larger organisation to act as such.Manel Medina could participate
also as esCERT-UPC,and use this “independent ” head,representing an
organisation with 12 years disseminating security and evaluating security
advises to lead the proposal.
Telefonica and Isdefe have already declined the leadership.Nevertheless
Telefonica will check if one of its daughter Companies coud take this role.

5 Work Package
5.1 Awareness of current situation in EU
5.1.1Approach
Research of on-going work in this field in EU.
Identification of relevant standards and good practices recommendations:
-ISO 2 004,Telefonica has already contributed to this standard with
some indicators,but they have been kept just as examples
-NIST,has recommended some benchmarking indicators,but they may
change depending on the goals of the benchmark,maybe we should
concentrate in some of them
5.1.2Deliverable
Organization of a workshop to set up a common understanding of the current
situation
5.2 Metric goals and approaches
5.2.1Approach
Production of a set of security indicators,rating them according to the intended
interest of security parameter to measure and the population to which it is
addressed.
This work will be done through ad-hoc working groups,each of them focused in
a particular application scenario.They will identify the needs of each scenario
and indicate the level of suitability of the general indicators for each of them.
The project will address the identification of indicators to measure the following
topics:
-User awareness level
-Risk Analysis results and deepness
-Anti-Malware update policy:frequency and wideness
-Network protection tools:use,update policy,etc.
-Legislation and regulation compliance strategy
-Business Resilience and Continuity protection plans
5.2.2Deliverable
Production of a good practices guidelines report.The report will provide tools to
identify the largest number of security breaches,and it will also propose
countermeasures to fix them.
The good practices will be classified according to the application scenario to
which they are addressed.

https://www.epss-fp7.org/  FP7-ICT-SEC-2007-1 and for the Sub-Scheme  CSA-CA.
Partner username      : S4G7QXN9DL
Partner password      : METRICASEC07