Full session Continuation of Security BoF: - Discussion of Security Action Plan - Identifying work leads <table> <tr> <th>Objective</th> <th>Activity</th> </tr> <tr> <td>Managing risk</td> <td>Threat modelling</td> </tr> <tr> <td></td> <td>Risk assessment</td> </tr> <tr> <td></td> <td>Population of IRIS GOCDB instance</td> </tr> <tr> <td>Defending Systems</td> <td>Security Baselines</td> </tr> <tr> <td></td> <td>Identify training sources</td> </tr> <tr> <td>Detecting Security Events</td> <td>Cybersecurity Testbed</td> </tr> <tr> <td>Minimising the impact of incidents </td> <td>Review IRIS Incident Response procedure</td> </tr> <tr> <td></td> <td>Plan IRIS Security Exercise</td> </tr> <tr> <td></td> <td>Identify mechanism to share lessons learned</td> </tr> </table>

Team session - Team structures - On Duty - Membership