YARIX CERT
The effective response to security incidents and threats
Prevention and Response to IT incidents
YCERT is a team with multivalent expertise, specialised in prevention, threat intelligence, IT emergency response, information and awareness. It helps organisations protect their most valuable assets by preventing and fixing IT incidents.
It represents a key point of reference for organisations who need to rely on the expertise of qualified personnel, ensuring centralised co-ordination for IT security issues inside the company; in the event of incidents, it provides a specialised response, also providing management for aspects relating to the collection and preservation of digital evidence, including in the case of legal proceedings.
Our CERT’s network of relationships
A key element of our strategy is our partnerships with institutions, organisations and other companies.
We consider knowledge on an international scale to be key in the fight against security threats.
For us, co-operation with all parties engaged in the fight against cyber crime is of the utmost importance.
We have developed various structured relationships with other national and international CERTS , committed to guaranteeing cyber protection in the countries in which they operate.
YCERT in particular is an official member of FIRST (Forum of Incident Response and Security Teams), accredited by Trusted Introducer and an Enisa listed team.
The signing of a memorandum of understanding in 2016 with the Polizia di Stato (Italian state police) for preventing and fighting cyber-attacks and defending critical infrastructure formalised a long-standing partnership with its Polizia Postale (postal) branch. This agreement provides for sharing of procedures and information to increase the ability to fight and prevent cyber-attacks in the struggle against cyber crime and cyber terrorism.
Quality Certifications
Yarix offers its clients the guarantee of a high-quality service, which the team’s numerous certifications also bear witness to: ISO 27001 Lead Auditor, ISACA CRISC (Certified in the Risk and Information System Control), ISACA CISM (Certified in Information Security Management), ISACA CISA (Certified Information System Auditor), ISECOM OSSTMM OPSA (Professional Security Analyst Accredited Certification), ISECOM OSSTMM OPST (Professional Security Tester Certification), EnCase Certified Examiner (EnCE), SANS/GIAC Network Penetration Tester (GPEN), SANS/GIAC Network Forensic Analyst (GNFA), SANS/GIAC Mobile Device Security Analyst (GMOB), SANS/GIAC Reverse Engineering Malware (GREM) e SANS/GIAC Web Application Penetration Tester (GWAPT).
YCERT PROFILE RFC 2350
The attached document contains a description of Yarix’s CERT in accordance with the methods provided for by RFC 2350. It provides general information on the CERT, the services it offers and the methods to contact it using a standard format.