News
Wageningen University & Research the first institution to connect to SURFsoc
Wageningen University & Research (WUR) is the first institution to connect to SURFsoc, the SURF Security Operations Centre launched in January. The Dutch education and research sector has set up SURFsoc together with SURF, the collaborative organisation for ICT in Dutch education and research. The aim is to create a more cybersecure future for the entire sector. In the coming weeks, several education and research institutions, such as Fontys, Maastricht University and LUMC, will also join.
Importance of sector-wide cybersecurity
In 2020, at the initiative of the universities, a start was made to establish a sector-wide Security Operations Centre (SOC) at SURF. The immediate trigger for this was the ransomware attack on Maastricht University in late 2019. There was a growing need for collaboration and knowledge sharing in the area of cybersecurity among the institutions. SURFsoc was launched in January, and WUR is the first institution to join. The high number of institutions that now plan to join as soon as possible is testament to the importance that the sector attaches to cybersecurity.
First connection
"This onboarding process with WUR and Fox-IT, our partner that provides the Security Information and Event Management (SIEM) service within SURFsoc, has paved the way for a quick and smooth onboarding process for other members of SURF. And that's a good thing, because there is a great demand for SURFsoc. There are always unexpected challenges when the first institution comes on board. It was great to undertake that process with WUR. It was an enjoyable, constructive collaboration," says Jeroen Schuuring, SURFsoc project manager.
"For us, onboarding at SURFsoc was part of a larger programme to raise WUR's information security to a higher level," says Peter Ras, project manager at WUR. "We started working with Fox-IT immediately in January. We are proud that we are the first organisation to onboard and that we have been able to achieve this in this short time span - a real team effort."
Remon Klein Tank, Information Security Officer at WUR adds: "Together with representatives from the education and research sector, we made an early and principled decision to participate in SURFsoc. By combining information from various education and research sources, SURFsoc can determine whether or not a report is part of a larger offensive. This will enable us to respond more quickly and more effectively to threats. Working together and exchanging information greatly strengthens our defences."
About SURFsoc
SURFsoc is the contact point for the Dutch education and research sector that monitors cyber threats and prevents (potential) attacks and incursions against the ICT infrastructures of its affiliated institutions. SURFsoc's services comprise various components that complement and reinforce one another.
- Security Information and Event Management (SIEM)
- Advice on use cases and use case management
- Sharing knowledge about security
- Vulnerability scanning
The SIEM service is the technical core of SURFsoc and is provided by Fox-IT. SIEM monitors the ICT infrastructure of the institutions 24/7, identifies threats and, in the event of breaches, advises the institutions on actions to be taken to mitigate the risks. If necessary, SURFcert, which supports its member institutions 24/7 in the event of security incidents, shares this information sector-wide so that other institutions are also informed quickly of any threats that occur. SURFcert will also provide extra services within the SOC in the field of knowledge sharing and vulnerability scanning.