Who We Are
The RENU-Computer Emergency Response Team (RENU-CERT) facility was established in 2016 and became officially available to RENU member institutions in 2018.
Its main purpose is to handle security incidents of the institutions connected to the RENU network.
The RENU-CERT co-ordinates security incidents on behalf of its constituency and has no authority reaching further than that.
The RENU-CERT constituency is the Research and Education (R&E) Community of Uganda.
RENU-CERT is however expected to make operational recommendations regarding vulnerabilities and mitigation of incidents and/or incident handling.Such recommendations can include but are not limited to blocking addresses or networks.
The implementation of such recommendations is not a responsibility of RENU-CERT, but solely of those to whom such recommendations are made.
RENU-CERT has authority to address all types of computer security incidents which occur, or threaten to occur, in the Research and Education Network for Uganda network.
The level of support offered by the RENU-CERT varies with the type and severity of the incident
or issue, the type of constituent, the size of the user community affected, and the RENU-CERT resources
available at the time; though in all cases some response will be made.
Mission
The purpose of the RENU-CERT is to provide a secure environment for collaboration among Uganda's research and education institutions, as well as provide an effective and efficient response to their computer security incidents.
Affiliation
The RENU-CERT is a sub-section of the RENU Technical team at the RENU Secretariat. It is affliated with the sectorial CERT; UG-CERT (UCC) and the national CERT; CERT.UG/CC (NITA-U).
For more details, read the CSIRT Charter found here
Authority
The RENU-CERT has shared authority over its constituency. This means the RENU-CERT can only advise and influence constituents to disconnect from the network until the incident has been resolved. Additionally, it might assist the constituency by helping with coordination and response to the advice.
For more details, read the CSIRT Charter found here