West Midlands WARP

1
West Midlands WARP

• Are you keeping up to date with IT Security?

2
Agenda

• What is the West Midlands WARP?
• WARP Background Information
• Our Services
• Filtered Warnings Service
• - How It Works
• - Your Subscription
• - Your Device
• - Other Features
• - Sample Alert
• Sign Up/Contact
• Conclusion
• Questions?

3
West Midlands WARP

• Warning, Advice and Reporting Point managed in
  association with the University of Wolverhampton
  within the National e-Crime Prevention Centre.
• Currently an Internet Based service for Local
  Authorities in the West Midlands region, in
  collaboration with West Midlands Connects.
• Provides an added layer of coherent
  infrastructure security for local government
  community, together with associated public
  bodies, within the region.

4
What is a WARP?

• WARP - Warning, Advice and Reporting Point.
• Part of the Information Sharing Strategy of the
  CPNI (Centre for the Protection of the National
  Infrastructure).
• 19 WARPs in UK
• Community based service where members can receive
  and share up to date advice on information
  security threats, incidents and solutions.
• Consists of one or more operators
• Usually between 20 100 members who belong to a
  community (SME, local government, service
  providers, education, health sector)
• The operator(s) use website, email, telephone,
  SMS and occasional meetings to send a
  personalised service of warnings and advice to
  the members.
• Mainly IT Security advice, but can include other
  material (e-crime, contingency planning etc).
• Operator taps into knowledge of members
  themselves to help other members via bulletin
  board
• WARP provides a trusted environment for sharing
  incident reports.
• Small, personal and Not-for-Profit

5
Enhance Your Security, Reduce Your Vulnerability

• Why are WARPS needed?
• Huge daily volume of security information
  generated to help protect IT systems. Can be a
  time- consuming and expensive business
• Registering for and receiving alerts from various
  sources can mean you receive alerts about
  everything many of which have nothing to do
  with your systems or infrastructure.
• Monitors the wealth of sources, warnings and
  advisories currently available via the Internet,
  from vendors, CERTs and advice centres.
• Why are WARPS effective?
• Deliver customised early warnings
• Members exchange advice and best practice within
  the community
• Provides trusted environment for sharing incident
  reports
• Cost Effective

6
WARP Member Benefits

• Early Warnings
• Peer Support
• Improved Preparedness
• Compliance with IS027001
• Not being alone
• Increased Security!

7
Our Services

• Filtered Warnings Service - members receive only
  the security information they need, selected via
  an on-line tick list.
• Advice Brokering Service members learn from
  other members initiatives and experience,
  possibly through a members bulletin board
• Trusted Sharing Service Reports are anonymous
  so that members can learn from each others
  attacks and incidents, without fear of
  embarrassment of recrimination

8
Filtered Warnings Application

• Provides WARP members with the capability to
  receive security related Warnings and Advisories
  that are based upon individual area of interest.
• Security Information from a number of information
  sources, are categorised against a tick-list of
  possible information subjects for relevance and
  urgency and disseminated by the WARP operator in
  a timely manner.
• WARP members can easily modify and maintain their
  list of selections.

9
FWA Member Overview

• A FWA Subscriber is a full member of the WARP
  community who subscribes to the FWA service. The
  subscriber also has the ability to report
  information and to post news that the operator
  will approve and publish where relevant. They are
  able to decide their own level of subscription
  and maintain their own devices and profile.
• We will now go through the different features of
  the FWA

10

• Subscribe To Selected Categories

Members can subscribe to categories of their
choice, by simply using a tick-list.
11
Add Preferred Device
A device is the delivery method in which a member
receives their alerts, i.e. via email, SMS, xml.
E .g. Alerts sent via email to warpmember_at_abc.com
12
Sample Alert
Alert in HTML Email format, sent straight to your
inbox

• Includes
• Basic Technical Description of Alert
• Workaround
• Impact
• Source
• References

13
Sample News
Information Security News HTML Email format.
Latest headline delivered to your inbox
14
Alerts Overview
Can view all published, unpublished and
superseded notifications, along with Trusted
Sources.
15
Search Historic Alerts
16
Conclusion

• Let us help you enhance your security and
  reduce your vulnerability

17
Contact

• Email
• Tony.Proctor_at_necpc.org.uk
• Telephone
• 01902 - 321839

18
Questions?