Mission

The description of the Vulnerability Advisory Service given here is according to RFC2350. RFC2350 "Expectations for Computer Security Incident Response" contains the possible activities of a CERT and recommends a selfdescription, whose sample we are following.

Document Information
Contact Information
Charter
Policies
Services
Disclaimers

1. Document Information

Date of last update: Version 1.3.2 published 2024-09-05
Distribution / Location: The current version of this description document is available from the Website https://www.dcert.de/mission.html. Please make sure you are using the latest version.
Authenticating this document: Integrity and authenticity of electronic documents can be achieved by using digital signatures (see chapter 2). A signed version of this document is available on request.

2. Contact Information

Name

Vulnerability Advisory Service (fomerly dCERT)

Adress

Deutsche Telekom Security GmbH
Friedrich-Ebert-Allee 71-77
53113 Bonn
Germany

Time Zone

Europe/Berlin (GMT+0100, and GMT+0200 from April to Oktober)

Telephone

+49 (800) 999 222 3

Email addresses

dcert-ticket@telekom.de

Public Keys and Confidentiality

The Vulnerability Advisory Service supports signed and encrypted communication with S/MIME and PGP.

PGP-Key

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: PGP Desktop 10.2.0 (Build 1672)
Comment: dCERT by Telekom Security
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=8Goz
-----END PGP PUBLIC KEY BLOCK-----

Team Members

The Vulnerability Advisory Service is organised by highly qualified employees of Telekom Security. The complete Telekom Security portfolio can be seen at https://security.telekom.com/.

Other Information

General information about the Vulnerability Advisory Service can be found at https://www.dcert.de/.

Points of Customer Contact

The Vulnerability Advisory Service can be reached using e-mail and phone. Electronic communication is preferred.
Working hours are Monday to Friday 8:00 to 15:00 except holidays.

3. Charter

Mission: The primary objective of the Vulnerability Advisory Service is proactive supply of its customers with the latest information about new vulnerabilities in the IT security and their remedies.
Constituency: The Vulnerability Advisory Service works exclusively for customers of Deutsche Telekom Security GmbH.
Affiliation: The Vulnerability Advisory Service is a service offering from Deutsche Telekom Security GmbH.
Authority: The Vulnerability Advisory Service provides proactive services as described in chapter 5.

4. Policies

Target group: The proaktive services of the Vulnerability Advisory Service are primarily focused to security officers and administrators. The issued advisories serve as triggers in the patch management process of the customers.
Co-operation, interaction and disclosure of information: In principal, all customer-related information is treated as high confidential. All personal information is treated in accordance with the german data protection act (BDSG) and the EU General Data Protection Regulation (GDPR). Data privacy information regarding the Vulnerability Advisory Service is published at https://www.dcert.de/datenschutz.
Communication and Authentication: Non-sensitive information will be sent using ordinary e-mail. Confidential information will mainly be sent encrypted using e-mail. Phone and fax will be used without special precautions.

Every customer has to name a contact person. The contact person authorises further employees at the customer on demand.

5. Services