Work Products

1. Detailed plans and materials with which to conduct each exercise.
2. Conduct of the exercises.
3. Compilation of lessons learned from each exercise.
4. Final report of methodology, key metrics, and key outcomes for each exercise, and overall lessons learned.

Resources and References

Operational support in conduct of exercises as may be requested of and agreed by InCommon staff, eg, outreach to prospective exercise participants.

• Working Group Google folder 

• REFEDS SIRTFI Framework

• REFEDS SIRTFI wiki 
• eduGAIN Security Incident Response Handbook v1.0: 
• AARC security incident response tabletop exercise reports
  • Incident Simulation Report from March 2018
  • Incident Response Test Model for Organizations Simulation
• AARC SIRTFI training course

Chairs and Sponsor

Co-Chair: David Bantz, Kyle Lewis

About the SIRTFI Exercise Working Group

The SIRTFI Exercise Working Group prepares members of the InCommon Federation community to handle a federated security incident by conducting one or more tabletop exercises to simulate aspects of responding to the real thing. Exercises are aimed to be learning opportunities, increasing familiarity with and shared understanding of key concepts and practices in the SIRTFI framework.

The SIRTFI Exercise Working Group is chartered by the InCommon Community Trust and Assurance Board.