Computer Security Incident Response Team

Higher Education's Incident Response Team

REN-ISAC serves as a Computer Security Incident Response Team (CSIRT) for the research and education community of North America. Our team monitors, receives, and analyzes concerning trends and questionable incidents, such as data dumps, sinkholed domains, and phishing campaigns 24 hours a day and 7 days a week. Once received and analyzed, REN-ISAC disseminates timely reports to both member and non-member higher education organizations that have been indicated as victims of attacks.

Our CSIRT team is also available for inquiries concerning possible network-based threats. Contact REN-ISAC's CSIRT team with your questions.

Since CSIRT serves all of higher education in North America, your organization does not need to be a member to receive notifications nor to use our services. In addition, the receipt of a CSIRT notification does not confirm that your organization is a member of REN-ISAC.

Is your organization a REN-ISAC member?

For more information

REN-ISAC's RFC 2350 Description provides thorough information regarding our CSIRT implementation, including an overview of its roles, responsibilities, and services offered.