Good Morning All,
1. Thank you for the feedback everyone. There have been a number of
requests how to subscribe to CCIP's mailing lists, if you send an email
to CCIP Publications with the subject of
"Subscribe" then we will add you to our lists, which are relatively low
volume one-two posts per month.
If you have a security incident you would like to report it or you are
aware of something that you think CCIP should be aware of then please
send an email to CCIP Incident Response
When it comes to security related issues I always say that "I would
rather hear about something three times than not at all!"
2. CCIP are not currently not preparing regular summaries of activity
but it is something we will consider implementing.
3. Currently the volume of CCIP Alerts is about four a year, so posting
those here sounds like it would be appropriate and we will review that
if the volume starts increasing significantly. Again the threshold for
issuing an alert is when there is active exploitation of a new or
unpatched vulnerability.
CCIP's current philosophy is that we would rather issues alerts and
advisories less frequently but have people listen to us when we do,
versus just being another noisy feed that becomes somewhat ignored.
We definitely don't want to be considered as another "Chicken Little",
but sometimes we have to err on the side of caution. When it comes to
security I always say that "I would rather hear about something three
times than not at all!"
4. This is a dynamic field we work in and we are constantly reviewing
what we do, and how we do it. We are always open to feedback and
suggestions either on list or off list.
5. Thanks for reading.
Regards,
Paul.
--
Paul McKitrick
Head of Stakeholder Engagement
Centre for Critical Infrastructure Protection
D: (+64) 4 498 7645
P: (+64) 4 498 7654
F: (+64) 4 498 7655
E: paul.mckitrick(a)ccip.govt.nz
W: www.ccip.govt.nz
---
This e-mail contains official New Zealand Government information, which
is intended for the use of addressees only. If you have received this
e-mail in error, please notify the sender immediately and delete. You
should not further disseminate, distribute or copy this e-mail in any way.
---
