CERT Training through APNIC

Keeping in view importance of capacity building of stakeholder for CERT, PTA organized CERT Training on 20-23 July 2020, PTA outreached to Asia Pacific Network Information Center (APNIC) to arrange capacity building for Pakistan’s telecom sector, so that telecom operators can be trained to share threat intelligence, as per best practices. PTA and APNIC initially planned face to face workshop at PTA Headquarters, F-5/1, Islamabad, however, due to Corona virus Pandemic the workshop design was changed to online session. The workshop was conducted from 10:00 AM to 1:00 PM daily and it was very much appreciated by the participants from PTA, Telecom industry and security agencies.

Training Outline

Introduction to Cyber Security and Incident Response

The objectives of this engagement was to:

• Share current threat landscape
• Highlight the importance of having security incident response capabilities
• Share best practices, community initiatives and tools used in incident response
• Facilitate collaboration between organizations after the sessions

Participants also did some hands-on exercises during the session. Virtual machine image were distributed prior to the sessions

Day 1

• Why do we need care about Cyber Security
• Understand the threat landscape and how organizations are affected
• Practical incident response & Incident Response Teams
• Case studies
• Exercise – DIY Assessment using OSINT tools

Day 2

• Understand Common Technical Attacks
• Detection and Prevention Best Practices
• Malware Case Studies
• Malware Analysis Exercise

Day 3

• Tools for supporting incident response and handling
• Information Sharing & Collaboration
• Security Communities
• Table Top exercise
• Recap and discussion