CERT Team

Primary source needed

CERN has an incident-response capability, but the formal unit name, reporting line, tooling and external memberships need a primary CERN source.

This node records the incident-response function as a research lead. It does not assert use of LanDB blocking, particular forensic tools or membership in named external CSIRT networks.

---

Topology

• Part of: security-governance
• Complies with: oc5
• Cites: oc5-computing-rules — establishes the security mandate, not the team’s structure.
• Cites: security-audited-for-the-better — contextual source for CERN security operations.