WISE Information Security for Collaborating e-Infrastructures

¹ European Organization for Nuclear Research (CERN), Geneva, Switzerland
² STFC UK Research and Innovation, Rutherford Appleton Laboratory, Didcot, United Kingdom
³ Nikhef, Amsterdam, The Netherlands
⁴ CSC, IT Center for Science Ltd., Espoo, Finland
⁵ Forschungszentrum Juelich GmbH (FZJ), Juelich, Germany
⁶ GÉANT Association, Amsterdam, The Netherlands

^* e-mail: hannah.short@cern.ch

Published online: 17 September 2019

Abstract

As most are fully aware, cybersecurity attacks are an ever-growing problem as larger parts of our lives take place on-line. Distributed digital infrastructures are no exception and action must be taken to both reduce the security risk and tohandle security incidents when they inevitably happen. These activities are carried out by the various research infrastructures and it has become very clear in recent years that collaboration with others both helps to improve the security and to work more efficiently. The Wise Information Security for Collaborating e-Infrastructures (WISE) community provides a trusted framework where security experts can share information on topics such as risk management, experiences about certification processes and threat intelligence. With participants from multiple large scale Infrastructures, WISE focuses on standards, guidelines and practices, and promotes the protection of critical infrastructure. To date WISE has published two documents; a risk management template and a second version of the SCI framework, endorsed by multiple large-scale infrastructures. In 2018 WISE began work on new areas of relevance to the High Energy Physics community, including a focus on operational security and incident response for interoperating infrastructures. We present an overview of the available WISE recommendations, future work and how WISE brings benefits to the High Energy Physics community.