Training Education Drills Seminars Presentations

165 patched and up-todate, including any plugins that maybe used e.g. WordPress Plugins. 2.4. New services 2.4.1. New bilingual web site in English and Mongolian In 2014 MonCIRT developed and deployed bilingual English and Mongolian web site, new reliable email system. On the new web site we publishing constantly the security advisories, alerts, vulnerability notes.

2.4.2. Setting up new CSIRT

We supporting the establishment of new CSIRT at Ministry of Defense. We provided MoD with guideline for establishment of CSIRT, draft procedures. 3. Events organized co-organized

3.1. Training Education

In 2014 the MonCIRT organized workshops and trainings focused on targeted audience such as government and financial sector IS officers, System Administrators, ISPs etc. Experts from industry are delivering lectures in these workshops apart from MonCIRT staff. The MonCIRT offers different training courses. One course offering are geared toward educating policymakers, managers, and senior executives who are responsible for the security of information assets and based in MNS ISOIEC 27001, 27002, 27005, 27033. Courses offered in 2014 included the following: • Network security management and configuration • Information Security System of Organization based on MNS ISOIEC 27001 • Internal Information Security audit and Self evaluation • Network Monitoring • Fundamentals of Incident Handling and Management In addition MonCIRT organized following workshop: « Workshop on Advanced Persistent Treats on April 21, 2014 166

3.2. Drills

In 2014 MonCIRT cannot organize local network security drill-IV due to financial limitation and economic crisis.

3.3. Seminars

In order to create awareness and build Network Security skills within the constituency MonCIRT conducted the following conferences, seminars successfully: a. MonCIRT was one of the partner in organization of ICTPA expo 2014 and participated in conference dedicated to this event. The governing board director of MonCIRT prof Khaltar Togtuun was one of key speaker of this conference. b. With sponsorship of Security Solution Service LLC and National Data Center organized annual “Security Open Day Mongolia 2014” and “Kharuul Zangi 2014” the ethical hacking contest in August. 4. Achievements

4.1. Presentations

MonCIRT’s board director participated and presented in local conferences as key speakers. In these conferences they have presented following presentations: a. Conducted presentations during the Annual “Security Open Day” 2014 conference on themes “Modern APTs and how to combat with them”. Lectures and presentations have been made by members of MonCIRT in various workshops and seminars conducted in the country.

4.2. Publications