Good Morning All, 1. Thank you for the feedback everyone. There have been a number of requests how to subscribe to CCIP's mailing lists, if you send an email to CCIP Publications <publications(a)ccip.govt.nz> with the subject of "Subscribe" then we will add you to our lists, which are relatively low volume one-two posts per month. If you have a security incident you would like to report it or you are aware of something that you think CCIP should be aware of then please send an email to CCIP Incident Response <incidents(a)ccip.govt.nz> When it comes to security related issues I always say that "I would rather hear about something three times than not at all!" 2. CCIP are not currently not preparing regular summaries of activity but it is something we will consider implementing. 3. Currently the volume of CCIP Alerts is about four a year, so posting those here sounds like it would be appropriate and we will review that if the volume starts increasing significantly. Again the threshold for issuing an alert is when there is active exploitation of a new or unpatched vulnerability. CCIP's current philosophy is that we would rather issues alerts and advisories less frequently but have people listen to us when we do, versus just being another noisy feed that becomes somewhat ignored. We definitely don't want to be considered as another "Chicken Little", but sometimes we have to err on the side of caution. When it comes to security I always say that "I would rather hear about something three times than not at all!" 4. This is a dynamic field we work in and we are constantly reviewing what we do, and how we do it. We are always open to feedback and suggestions either on list or off list. 5. Thanks for reading. Regards, Paul. -- Paul McKitrick Head of Stakeholder Engagement Centre for Critical Infrastructure Protection D: (+64) 4 498 7645 P: (+64) 4 498 7654 F: (+64) 4 498 7655 E: paul.mckitrick(a)ccip.govt.nz W: www.ccip.govt.nz --- This e-mail contains official New Zealand Government information, which is intended for the use of addressees only. If you have received this e-mail in error, please notify the sender immediately and delete. You should not further disseminate, distribute or copy this e-mail in any way. ---