RIPE NCC
RIPE NCC Information Security Controls Framework For Cloud Services
I work as Senior Information Security Officer for the RIPE NCC. Before that, I worked for several Internet related companies in various technical and security related roles. I'm interested in all aspects of information security and privacy, which includes a wide range of topic from information security frameworks (ISO 27001, CSC-20), cloud security, incident response, intrusion detection, OSINT, digital forensics to GDPR. My guilty pleasure? Doing hands-on 'hacking' and digital forensic challenges.
Information security controls help protect against vulnerabilities and risk. In this article, we share details of the RIPE NCC Cloud Security Controls Framework that we'll be using to assess whether cloud providers meet the security requirements for our services.
Defining the Criticality of RIPE NCC Services
I am the Chief Operations Officer of the RIPE NCC, responsible for the registry, member-related services and software development, including the RIPE Database, LIR Portal, and RPKI. I have joined the RIPE NCC in 2012 as a Software Engineer, and since then have worked in different roles across the organisation. I have a MSc in Computer Science.
We’ve been brainstorming on a process to determine the criticality level of our services, and we’d now like to ask the community for input on how we should approach this effort moving forward.
A Matter of Principle
Chris Buckridge is an Advisor to the RIPE NCC Managing Director on issues of Global Strategic Engagement. He has worked for the RIPE NCC since 2006.
Principles for Internet governance - are they a useful tool, or just one more collection to add to the list? And is there a need to document RIPE's own principles?
NIS 2 (and the other EU regulation updates you need to know): November 2021
Suzanne Taylor is a Public Policy & Internet Governance Consultant. In her work with the RIPE NCC, she engages with a broad range of Internet stakeholders including the RIPE NCC membership, governments, law enforcement and intergovernmental organisations. From 2012 to 2016, she worked in communications at the RIPE NCC and has previously worked as a journalist and in media relations and science communications.
This is the latest in an ongoing series in which we give a brief overview of the most pertinent digital policies currently being proposed, debated and implemented in the European Union.
How Sanctions Affect the RIPE NCC
I am the Chief Legal Officer at the RIPE NCC, responsible for all legal aspects of the organisation.
Ahead of next week’s RIPE Meeting, we thought it was worth looking at how sanctions have affected us over the past year or so, along with some of the steps we have taken in response.
Supporting an Independent TF-CSIRT
Kjerstin Burdiek is a Communications Officer at the RIPE NCC. She joined the RIPE NCC in 2021 with a background in linguistics.
TF-CSIRT is preparing to go independent, separating from GÉANT. As they take their first steps as an independent organisation, we'll be there to lend our support.
RIPE NCC Cloud Strategy Framework
I am the Chief Operations Officer of the RIPE NCC, responsible for the registry, member-related services and software development, including the RIPE Database, LIR Portal, and RPKI. I have joined the RIPE NCC in 2012 as a Software Engineer, and since then have worked in different roles across the organisation. I have a MSc in Computer Science.
Our cloud strategy framework provides a starting point that we will use when developing cloud implementations in the future. It also forms a solid basis for discussions with the community on specific proposals relating to our services.
Hosted DNS Application Update
Expanding the RIPE NCC Authoritative DNS Service means cooperating with the community to find organisations out there willing to host AuthDNS instances on their networks. In this article, find out exactly what's required from hosts and how to apply.
The Tragedy of Internet Infrastructure in Afghanistan
Dr. Farzaneh Badiei is the founder of Digital Medusa, an initiative that focuses on protecting the core values of our global digital space with sound governance. For the past decade, Dr Badiei has directed and led projects about Internet and social media governance.She has undertaken research at Yale Law School, Georgia Institute of Technology and the Humboldt Institute for Internet and Society in Berlin. Her focus is on governance issues related to Internet infrastructure and social media platforms.
Economic sanctions have had a negative impact on Internet access for residents of the target countries. With Afghanistan likely set to join the list of sanctioned countries, Farzaneh Badiei looks at what effects this will have on the country's Internet infrastructure at the level of generic domain …
Using Third Parties to Automate Our Due Diligence
I am the Chief Operations Officer of the RIPE NCC, responsible for the registry, member-related services and software development, including the RIPE Database, LIR Portal, and RPKI. I have joined the RIPE NCC in 2012 as a Software Engineer, and since then have worked in different roles across the organisation. I have a MSc in Computer Science.
For the past year, we've been improving our due diligence procedures. Performing all of the necessary checks is complex work, and there’s a lot of it. For this reason, we'll be using trusted third-party expertise and automation in two key areas: sanctions screening and the validation of identificat…