New ENISA publications available

In implementing its annual Work Programme, ENISA in December 2009 published a number of studies, reports, and a survey covering issues of resilience of communication networks, anti-spam measures by providers, and CERT/CSIRT material.

*Resilience: Tracking standardisation activities in NIS* ENISA published a study on "Gaps in standardisation related to resilience of communication networks". The study provides five recommendations for future standardisation activities. It can be downloaded from the ENISA website at: http://www.enisa.europa.eu/act/it/library/deliverables/gapsstd

*Third ENISA Survey on anti-spam measures implemented by European providers* The survey aims to determine how e-mail service providers are combating spam on their networks. It helps identifying the state of the fight against spam and helps service providers to learn from their peers throughout Europe. The survey report is available from the ENISA website at: http://www.enisa.europa.eu/act/res/other-areas/anti-spam-measures

*New CERT material*ENISA launched new Computer Emergency Response Teams (CERT or CSIRT) material including a field report on two CSIRT exercise pilots, a draft baseline capabilities definition for national/governmental CERTs, and three DVD images to support the exercise material.
The field report on the exercise pilots which is a hands-on report on logistics, preparation and experiences during the event can be obtained from the ENISA website at: http://www.enisa.europa.eu/act/cert/support/exercise
The draft document defines baseline capabilities for CERTs with national responsibility in the areas of service provision, mandate, cooperation and operation. This document which is a snapshot of an ongoing activity to enhance cross-border cooperation of national/governmental CERTs can be obtained from http://www.enisa.europa.eu/act/cert/support/baseline-capabilities
Three DVD images for teachers and students aim at enabling an easy application of the CSIRT exercise material. The material which is not only useful for CERTs but can also be applied in any kind of training for security professionals is available at http://www.enisa.europa.eu/act/cert/support/exercise