My two cents, what are the odds of that happening? 1. There's no legal or regulatory requirement to report incidents. 2. Service providers and the like use "reputation risk" to avoid disclosure. -- Mark. On 19/11/2014 20:08, Mwendwa Kivuva via kictanet wrote:

Barrack, this is interesting. Interesting because there is no single incident reported by Uganda CERT in Uganda.

If Kenya CERT is to give a monthly report, I would care for them to include relevant information for our region, as you have correctly observed. ______________________ Mwendwa Kivuva, Nairobi, Kenya L: https://www.linkedin.com/in/lordmwesh B: http://lord.me.ke/ T: twitter.com/lordmwesh

"There are some men who lift the age they inhabit, till all men walk on higher ground in that lifetime." - Maxwell Anderson

On 19 November 2014 03:58, Barrack Otieno via kictanet <[email protected]> wrote:

...

Can the community Authority through its CERT provide us with this kind of information with emphasis on what is happening locally?

Best Regards

---------- Forwarded message ---------- From: Uganda Computer Emergency Response Team UgCERT <[email protected]> Date: Tue, 18 Nov 2014 07:59:35 GMT Subject: [i-network] Notable Cyber Attacks that happened during the 1st half of November To: I-Network Uganda <[email protected]>

Good Morning All,

Attached is a list of the major cyber attacks that happened around the world during the 1st half of this month and also during the month of October.

You can read them for your own interest.

Regards

Uganda Computer Emergcency Response Team, UCC

-- Barrack O. Otieno +254721325277 +254-20-2498789 Skype: barrack.otieno http://www.otienobarrack.me.ke/

_______________________________________________ kictanet mailing list [email protected] https://lists.kictanet.or.ke/mailman/listinfo/kictanet

Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/kivuva%40transworldafr...

The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.

KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.

_______________________________________________ kictanet mailing list [email protected] https://lists.kictanet.or.ke/mailman/listinfo/kictanet

Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/mkipyegon%40outlook.co...

The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.

KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.

Thanks, TESPOK has some quality reports and data. I would assume service providers openly submit data that goes into the reports. As a follow up question, are there published structures (internal or otherwise) guiding CERT? And can we independently verify this data? Side note, I couldn't help noticing "Slammer Worm" is listed as the biggest malware threat for 2013. On 20 Nov 2014, at 10:32, "Mwendwa Kivuva" <[email protected]> wrote:

Actually Mark, TESPOK publishes such data, maybe not monthly, but they do publish.

CERT has nothing to do with disclosure or regulatory requirements, but has everything to do with being proactive. Data like the current trending virus in the region, spam networks affecting our ISPs, and Denial of Servie Attacks are straightforward threats that don't need any disclosure agreements. And one aim of CERT is to make the users aware of mitigation measures to take in case of such threats.

-- ______________________ Mwendwa Kivuva, Nairobi, Kenya twitter.com/lordmwesh

The best athletes never started as the best athletes. You have to think anyway, so why not think big? - Donald Trump. "You miss 100 percent of the shots you never take." - Wayne Gretzky. Tackle the biggest frog first. I will persist until I succeed - Og Mandino.