This document provides a description of EDU-CERT according to RFC 2350.it provides information about the CERT, how to contact the team, and describes its responsibilities and the services offered to its constituency.
This is version 1.00, published 16/01/2012.
This mailing list is moderated.
the current version of this cert description document is available from the EDU-CERT website ; its URL is : http://www.educert.ma/en/CSIRT-descr.txt
يمكن الاضطلاع على النسخة العربية على :
Please make sure you are using the latest version.
Both the English and Arabic versions of this document have been signed with the EDU-CERT's PGP key. The signatures are also on our Web site, under:
this section describes how to contact MA-CERT.
"EDU-CERT": the Moroccan Academic Computer Emergency Response Team.
Angle avenue Allal El Fassi, avenue des FAR, Quartier Hay Ryad,
BP. 8027 Nations Unies, 10102 Rabat, MAROC
2.3 Time Zone
Casablanca (GMT-0:00, and GMT+1:00 from April 2 to July 31)
+212 537 569 898
+212 537 569 899 (this is *not* a secure fax)
The EDU-CERT has a PGP key, whose KeyID is aaaaaaaaaa and whose fingerprint is 686D 781C 4CBF 034A 6D03 B105 F9BD 33F6 F621 AE1D.
The key and its signatures can be found at the usual large public keyservers.
Because MA-CERT is still in it’s first year of existance , this key still has relatively few signatures; efforts are underway to increase the number of links to this key in the PGP "web of trust".
Team Lead is Karim OUSTOUH. A complete list of team members can be found at :
Management, liaison and supervision are provided by Redouane Merrouch, ICT Director of CNRST and head of MARWAN network.
General information about the EDU-CERT, as well as links to various recommended security resources, can be found at : http://www.educert.ma/
The preferred method for contacting the EDU-CERT is via e-mail at <
If it is not possible (or not advisable for security reasons)to use e-mail, the team can be reached by telephone during regular office hours.
The MA-CERT's hours of operation are generally restricted to regular business hours (09:00-17:00 Monday to Friday except holidays).
If possible, when submitting your report, use the form mentioned in section 6.
This section describres EDU-CERT charter.
EDU-CERT's mission is to coordinate and investigate security incidents regarding the Moroccan Academic Reasearch Wide Area Network (MARWAN), ans assist its constituents in implementing proactive measure to reduce the risk of such incidents to occur.
Our constituency is defined to be institutions that are connected to MARWAN (Moroccan Academic and Research Area Network).
MA-CERT is responsible for this autonomous system: 30983.
EDU-CERT is the Computer Security Incident Response Team (CSIRT) for the Moroccan academic and Research Network (MARWAN).
Funding is provided by the CNRST (National Center for Scientific and Technical Research ).
EDU-CERT operates under the auspices of, and with authority delegated by, the director of CNRST . we expect to work cooperatively with system and network administrators of MARWAN connected institutions.
This section describes EDU-CERT policies
The EDU-CERT is authorized to address all types of computer security incidents which occur, or threaten to occur within its constituency.
The level of support given by MA-CERT will vary depending on the type and severity of the incident or issue, the type of constituent, the size of the user community affected, and the MA-CERT's resources at the time, though in all cases some response will be made within one working day.
We expect end users to contact their local systems or network administrators at the level of the connected institution.
MA-CERT will exchange all necessary information with other CSIRTs as well as with other affected parties if they are involved in the incident or incident response process. furthermore, unless explicitly authorized, appropriate measures will be taken to protect the identity of members of our constituency.
For sensitive information exchanges we prefer encrypted and signed e-mail using PGP . For other communication phone, facsimile, postal service, or unencrypted e-mail may be used.
This section describes services offred by EDU-CERT.
EDU-CERT will assist system administrators in handling the technical and organizational aspects of incidents. In particular, it will provide assistance or advice with respect to the following aspects of incident management:
To report an incident, a web form is availaible at : http://www.educert.ma/reportincident.php
Incident reports should contain the following information
Preferable the report includes a log file in a common format.
While every precaution will be taken in the preparation of information, notifications and alerts, EDU-CERT assumes no responsibility for errors or omissions, or for damages resulting from the use of the information contained within.