Training Drills Seminars Publication. Sensors

155

3.1. Training

Staff in MOCERT service a provided on the job training of incidents along with formal attendance to courses and seminars that first show the need for computer security, followed by personnel certification is practical.

3.2. Drills

The involvement in 2014 in the APCERT drill included as a Player, Observer and EXCON. Also MOCERT assisted the Organising Committee in designing the Detailed Scenario. The event continues to be instrumental in reshaping some of the services provided by MOCERT for 2014. The drill allowed for a better understanding of issues facing the CERT community outside of Macau and skill sets required to solve them. Similar level of involvement in the Organizing Committee for the 2015 drill has been sought.

3.3. Seminars

MOCERT attend both APCERT Taiwan and FIRST Boston meeting in the year 2014. 156 4. Achievements

4.1. Publication.

The four 4 leaflet publications that were previously made continue to be distributed during the multitude of events being organized and co-organized by MOCERT 5. International Collaboration

5.1. Sensors

There are two 2 projects that MOCERT is involved in which are related to hosting a honey pot project 1. Tsubame for JPCERT-CC 2. Podrunner for DRG 6. Future Plans MOCERT investigated cooperation with industry in handling and reducing the impact of phishing, which resulted in the incident reporter to be able to handle the events independently. Further work is needed on verifying latent vulnerabilities in the machines in Macau and proactive checking of machines on routable IP will need to be monitored closer in the coming year. Further effort in developing malware analysis skill sets will be very important for MOCERT’s development. 7. Conclusion 157 2014 has been a year where our services metrics fluctuated as sources of incident changed and staffing number also changed. The major challenges up ahead are restructuring the team to restore capacity and functionality as further malware analysis and vulnerability scanning is sought. The changes envisaged will be beneficial to MOCERT’s the constituencies as these changes are done progressively in the next few years to promote a clean and safe Internet. 158 MonCIRT Mongolian Cyber Incident Response Team – Mongolia 1. About MonCIRT

1.1. Introduction