Since 2021, Nameshield has integrated a CERT into its registrar activities. NS-CERT (Computer Emergency Response Team) is the operational entity responsible for responding to security incidents and managing risks related to information security that could impact the Nameshield group.
Why did Nameshield adopt a CERT?
As a key player in cybersecurity within the domain name ecosystem, Nameshield is committed to achieving the highest levels of security for its customers by anticipating and addressing all threats that affect them.
Nameshield is currently the only French ISO 27001-certified registrar to have an integrated CERT to ensure maximum security for its customers’ intangible assets and detect potential malfunctions among registries and partners.
The CERT’s main missions
- Incident management: The NS-CERT centralizes security events in order to detect security incidents. The team then manages these incidents to identify, contain, and resolve them as effectively as possible. The NS-CERT also performs a root cause analysis on each incident to implement the right measures to ensure that they do not happen again.
- Security specialist: The security team acts as the experts in responding to various information system security requests. NS-CERT guides technical teams in identifying risks and implementing measures relating to any suspicious changes.
- Awareness: The NS-CERT ensures that a high security level is maintained for all Nameshield’s employees through extensive, personalized awareness training. Simulation exercises are also used to assess the group’s employees’ reflexes.
- Threat monitoring and detection: The security team, through its expertise and the implementation of technical tools, is responsible for monitoring, detecting, and assessing potential threats which might weigh on the organization’s information system.
- Penetration testing: The NS-CERT regularly performs internal penetration tests on the various components that make up the Nameshield ecosystem (web, physical security, networks, and administrative processes) in order to identify potential vulnerabilities and non-compliance with organizational standards. The team is then able to evaluate them to implement the necessary measures.
For more information on the NS-CERT, our RFC 2350 document is available through this link.
Do you wish to contact us or report an incident ?
Any security incident can be reported to us by email at cert [at] nameshield.net.
We are also available on this number +33 2 85 29 32 52 Monday to Friday from 9 a.m. to 6 p.m.
To secure electronic communications, we recommend using our PGP key 0xFA11B92D75E12599 which you can also download here.
For any other inquiries, you can write to us at the following address:
CERT-NS
Nameshield CERT
36 bis rue Delaage,
49100 Angers
France
