{"id":641,"date":"2018-11-09T11:26:26","date_gmt":"2018-11-09T11:26:26","guid":{"rendered":"https:\/\/cert.md\/?page_id=641"},"modified":"2018-11-09T11:26:26","modified_gmt":"2018-11-09T11:26:26","slug":"our-rules","status":"publish","type":"page","link":"https:\/\/cert.md\/ro\/our-rules\/","title":{"rendered":"Regulile noastre"},"content":{"rendered":"<p><span id=\"result_box\" class=\"\" lang=\"ro\" tabindex=\"-1\"><strong><span title=\"1.About this document \">1. Despre acest document<br \/>\n<\/span><\/strong><span title=\"1.1 Date of Last Update \"><strong>1.1 Data ultimei actualiz\u0103ri<\/strong><br \/>\n<\/span><span title=\"This is version 2.0, published 12.04.2018 \">Aceasta este versiunea 2.0, publicat\u0103 12.04.2018<br \/>\n<\/span><span title=\"1.2 Distribution List for Notifications \"><strong>1.2 Lista distribu\u021biei pentru notific\u0103ri<\/strong><br \/>\n<\/span><span title=\"None available \">Nu sunt disponibile<br \/>\n<\/span><span title=\"1.3 Locations where this Document May Be Found \"><strong>1.3 Loca\u021bii unde acest document poate fi g\u0103sit<\/strong><br \/>\n<\/span><span title=\"The latest version of this CSIRT description document is available from the CERT-GOV-MD web site: cert.gov.md\/desprecsc\/csirt-description-rfc-2350.htmlPlease make sure you are using the latest version. \">Cea mai recent\u0103 versiune a acestui document de descriere a CSIRT este disponibil\u0103 pe site-ul CERT-GOV-MD: <a href=\"https:\/\/cert.gov.md\/desprecsc\/csirt-description-rfc-2350.html\">cert.gov.md\/desprecsc\/csirt-description-rfc-2350.html<\/a>V\u0103 rug\u0103m s\u0103 v\u0103 asigura\u021bi c\u0103 utiliza\u021bi cea mai recent\u0103 versiune.<\/span><\/span><\/p>\n<p><strong><span title=\"2.Contact Information \">2.Contacta\u021bi informa\u021biile<br \/>\n<\/span><\/strong><span title=\"2.1 Name of the Team \"><strong>2.1 Numele echipei<\/strong><br \/>\n<\/span><span title=\"&quot;Cyber Security Center CERT-GOV-MD&quot; \">&#8222;Cyber \u200b\u200bSecurity Centre CERT-GOV-MD&#8221;<br \/>\n<\/span><span title=\"2.2 Address \"><strong>2.2 Adresa<\/strong><br \/>\n<\/span><span title=\"The State Chancellery of Republic of Moldova \">Cancelaria de Stat a Republicii Moldova<br \/>\n<\/span><span title=\"Center of Special telecommunications S.E. \">Centrul de Telecomunica\u021bii Speciale S.E.<br \/>\n<\/span><span title=\"Cyber Security Center CERT-GOV-MD \">Centrul de Securitate Cyber \u200b\u200bCERT-GOV-MD<br \/>\n<\/span><span title=\"Republic of Moldova \">Republica Moldova<br \/>\n<\/span><span title=\"Pia\u0163a Marii Adun\u0103ri Na\u0163ionale, 1 \">Pia\u021ba Marii Adun\u0103ri Na\u021bionale, 1<br \/>\n<\/span><span title=\"mun.\">mun. <\/span><span title=\"Chi\u015fin\u0103u, MD-2033 \">Chi\u0219in\u0103u, MD-2033<br \/>\n<\/span><span title=\"2.3 Time Zone \"><strong>2.3 Fusul orar<\/strong><br \/>\n<\/span><span title=\"GMT+0200, and GMT+0300 from April to October \">GMT + 0200 \u0219i GMT + 0300 din aprilie p\u00e2n\u0103 \u00een octombrie<br \/>\n<\/span><span title=\"2.4 Telephone Number \"><strong>2.4 Num\u0103r de telefon<\/strong><br \/>\n<\/span><span title=\"(+373 22) 820-900 (ask for the CERT-GOV-MD) \">(+373 22) 820-900 (cere\u021bi CERT-GOV-MD)<br \/>\n<\/span><span title=\"2.5 Facsimile Number \"><strong>2.5 Num\u0103rul faxului<\/strong><br \/>\n<\/span><span title=\"(+373 22) 250 522 \">(+373 22) 250 522<br \/>\n<\/span><span title=\"2.6 Other Telecommunication \"><strong>2.6 Alte telecomunica\u021bii<\/strong><br \/>\n<\/span><span title=\"None available \">Nu sunt disponibile<br \/>\n<\/span><span title=\"2.7 Electronic Mail Address \"><strong>2.7 Adresa de po\u0219t\u0103 electronic\u0103<\/strong><br \/>\n<\/span><span title=\"For incidents: incidents@cert.gov.md \">Pentru incidente: incidents@cert.gov.md<br \/>\n<\/span><span title=\"For other questions: info@cert.gov.md \">Pentru alte \u00eentreb\u0103ri: info@cert.gov.md<br \/>\n<\/span><span title=\"2.8 Public Keys and Other Encryption Information \"><strong>2.8 Cheile publice \u0219i alte informa\u021bii despre criptare<\/strong><br \/>\n<\/span><span title=\"The CERT-GOV-MD has a PGP key, whose details are: \">CERT-GOV-MD are o cheie PGP, ale c\u0103rei detalii sunt:<br \/>\n<\/span><span title=\"User ID: CSC CERT-GOV-MD (Cyber Security Center CERT-GOV-MD Official Contact) &lt;info@cert.gov.md&gt; \">ID-ul utilizatorului: CSC CERT-GOV-MD (Centrul de securitate cibernetic\u0103 CERT-GOV-MD Contact oficial) &lt;info@cert.gov.md&gt;<br \/>\n<\/span><span title=\"KeyID: 0x0A921FED \">ID-ul cheie: 0x0A921FED<br \/>\n<\/span><span title=\"Fingerprint: 1697 36E5 04BC EE1B 99F5 EA52 0D53 FFE2 0A92 1FED \">Amprent\u0103: 1697 36E5 04BC EE1B 99F5 EA52 0D53 FFE2 0A92 1FED<br \/>\n<\/span><span title=\"Public key of CERT-GOV-MD is available from: \">Cheia public\u0103 a CERT-GOV-MD este disponibil\u0103 de la:<br \/>\n<\/span><span title=\"https:\/\/cert.gov.md\/fileadmin\/user_upload\/pub_key\/0x0A921FED.asc \"><a href=\"https:\/\/cert.gov.md\/fileadmin\/user_upload\/pub_key\/0x0A921FED.asc\">https:\/\/cert.gov.md\/fileadmin\/user_upload\/pub_key\/0x0A921FED.asc<\/a><br \/>\n<\/span><span title=\"2.9 Other Information \"><strong>2.9 Alte informa\u021bii<\/strong><br \/>\n<\/span><span title=\"General information about the CERT-GOV-MD, as well as links to various recommended security resources, can be found at:www.cert.gov.md \">Informa\u021bii generale despre CERT-GOV-MD, precum \u0219i linkuri c\u0103tre diferite resurse de securitate recomandate pot fi g\u0103site la: <a href=\"https:\/\/www.cert.gov.md\">www.cert.gov.md<\/a><br \/>\n<\/span><span title=\"2.10 Points of Customer Contact \"><strong>2.10 Punctele de contact ale clien\u021bilor<\/strong><br \/>\n<\/span><span title=\"The preferred method for contacting the CERT-GOV-MD is via e-mail at info@cert.gov.md;\">Metoda preferat\u0103 de contactare a CERT-GOV-MD este prin e-mail la info@cert.gov.md; <\/span><span title=\"e-mail sent to this address will &quot;biff&quot; the responsible human, or be automatically forwarded to the appropriate backup person.\">e-mailul trimis la aceast\u0103 adres\u0103 va &#8222;bifa&#8221; persoana responsabil\u0103 sau va fi \u00eenaintat\u0103 automat persoanei de rezerv\u0103 corespunz\u0103toare. <\/span><span title=\"If you require urgent assistance, put &quot;urgent&quot; in your subject line. \">Dac\u0103 ave\u021bi nevoie de asisten\u021b\u0103 urgent\u0103, pune\u021bi &#8222;urgent&#8221; \u00een linia subiectului.<br \/>\n<\/span><span title=\"If it is not possible (or not advisable for security reasons) to use e-mail, the CERT-GOV-MD can be reached by telephone during regular office hours. \">\u00cen cazul \u00een care nu este posibil (sau nu este recomandat din motive de securitate) utilizarea e-mail-ului, CERT-GOV-MD se poate ajunge prin telefon \u00een timpul orelor de program regulate.<br \/>\n<\/span><span title=\"The CERT-GOV-MD's hours of operation are generally restricted to regular business hours (08:00-17:00 Monday to Friday except official holidays). \">Durata de func\u021bionare a CERT-GOV-MD este \u00een general limitat\u0103 la orele de program regulate (08: 00-17: 00 de luni p\u00e2n\u0103 vineri, cu excep\u021bia s\u0103rb\u0103torilor oficiale).<br \/>\n<\/span><span title=\"If possible, when submitting your report, use the form located at www.cert.gov.md\/incidente\/raportare-incidente.html\">Dac\u0103 este posibil, atunci c\u00e2nd trimite\u021bi raportul dvs., utiliza\u021bi formularul de la adresa <a href=\"https:\/\/www.cert.gov.md\/incidente\/raportare-incidente.html\">www.cert.gov.md\/incidente\/raportare-incidente.html<\/a><\/span><span id=\"result_box\" class=\"\" lang=\"ro\" tabindex=\"-1\"><strong><span title=\"3. Charter \">3. Carta<br \/>\n<\/span><\/strong><span title=\"3.1 Mission Statement a \"><strong>3.1 Declara\u021bia de misiune a<\/strong><br \/>\n<\/span><span title=\"Our mission is to assist in protection of information, resources and telecommunication systems of our constituencies from unauthorized access, illegal usage and violations of it is confidentiality, integrity and availability. \">Misiunea noastr\u0103 este de a contribui la protejarea informa\u021biilor, a resurselor \u0219i a sistemelor de telecomunica\u021bii ale cet\u0103\u021benilor no\u0219tri de accesul neautorizat, folosirea ilegal\u0103 \u0219i \u00eenc\u0103lcarea acestuia este confiden\u021bialitatea, integritatea \u0219i disponibilitatea.<br \/>\n<\/span><span title=\"The goals of the CERT-GOV-MD are: \u00a0\u00a0\u00a0\u00a0\">Obiectivele CERT-GOV-MD sunt:<\/span><\/span><\/p>\n<p><span title=\"Handling of computer incidents reports, preliminary examination of the facts and the situation on the basis of received information, providing emergency assistance to users to prevent hacker and virus attacks to computer systems. \u00a0\u00a0\u00a0\u00a0\">Manipularea rapoartelor privind incidentele informatice, examinarea preliminar\u0103 a faptelor \u0219i a situa\u021biei pe baza informa\u021biilor primite, furnizarea de asisten\u021b\u0103 de urgen\u021b\u0103 utilizatorilor pentru a preveni atacurile de tip hacker \u0219i viru\u0219i c\u0103tre sistemele informatice.<br \/>\n<\/span><span title=\"Timely notice to the competent organizations of the Republic of Moldova of emerging threats to computer security, distribute information to prevent them. \u00a0\u00a0\u00a0\u00a0\">Notificarea \u00een timp util a organiza\u021biilor competente din Republica Moldova a amenin\u021b\u0103rilor emergente la adresa securit\u0103\u021bii informatice, distribuirea de informa\u021bii pentru a le preveni.<br \/>\n<\/span><span title=\"Interaction and cooperation with foreign CERT\u2019s on legal support of information security, exchange information and experience with them. \u00a0\u00a0\u00a0\u00a0\">Interac\u021biunea \u0219i cooperarea cu CERT str\u0103ine privind sprijinul juridic al securit\u0103\u021bii informa\u021biilor, schimbul de informa\u021bii \u0219i experien\u021ba cu ace\u0219tia.<br \/>\n<\/span><span title=\"Develop recommendations to users about the use of the most effective security practices to ensure the prevention of illegal break-in of information systems. \">S\u0103 elaboreze recomand\u0103ri c\u0103tre utilizatori cu privire la utilizarea celor mai eficiente practici de securitate pentru a preveni p\u0103trunderea ilegal\u0103 a sistemelor informatice.<\/span><\/p>\n<p><span title=\"3.2 Constituency \"><strong>3.2 Circumscrip\u021bia electoral\u0103<\/strong><br \/>\n<\/span><span title=\"CERT-GOV-MD's constituency are central and regional state governance authorities, specialized organs of state security and telecommunications, academies and universities of the Republic of Moldova as defined in the Government Decision \u2116 840 of 26.07.2004 and its Annex \u21161. \">Reprezentan\u021ba CERT-GOV-MD este reprezentat\u0103 de autorit\u0103\u021bile centrale \u0219i regionale de guvernare, organele specializate de securitate \u0219i telecomunica\u021bii de stat, academiile \u0219i universit\u0103\u021bile din Republica Moldova, a\u0219a cum sunt definite \u00een Hot\u0103r\u00e2rea Guvernului nr. 840 din 26.07.2004 \u0219i anexa nr.<br \/>\n<\/span><span title=\"Internet domain and\/or IP address information describing the constituency: AS25319 and AS39279 \">Domeniul de domeniu \u0219i \/ sau adresa IP care descriu circumscrip\u021bia electoral\u0103: AS25319 \u0219i AS39279<br \/>\n<\/span><span title=\"3.3 Sponsorship and\/or Affiliation \"><strong>3.3 Sponsorizarea \u0219i \/ sau afilierea<\/strong><br \/>\n<\/span><span title=\"The CERT-GOV-MD is sponsored by the Center of Special Telecommunications S.E.\">CERT-GOV-MD este sponsorizat de Centrul de Telecomunica\u021bii Speciale S.E. <\/span><span title=\"It maintains affiliations with various CSIRTs on an as needed basis. \">Acesta men\u021bine afilieri cu diverse CSIRT-uri pe o baz\u0103 necesar\u0103.<br \/>\n<\/span><span title=\"3.4 Authority \"><strong>3.4 Autoritatea<\/strong><br \/>\n<\/span><span title=\"The CERT-GOV-MD authority spans on informational and telecommunication systems of public administration authorities (AS25319 and AS39279) and is limited by the role of its sponsoring organization S.E.\">Autoritatea CERT-GOV-MD se ocup\u0103 de sistemele informa\u021bionale \u0219i de telecomunica\u021bii ale autorit\u0103\u021bilor administra\u021biei publice (AS25319 \u0219i AS39279) \u0219i este limitat\u0103 de rolul organiza\u021biei sponsorizate S.E. <\/span><span title=\"CTS. \">CTS.<\/span><\/p>\n<p><strong><span title=\"4. Policies \">4. Politici<br \/>\n<\/span><\/strong><span title=\"4.1 Types of Incidents and Level of Support \"><strong>4.1 Tipuri de incidente \u0219i nivel de sus\u021binere<\/strong><br \/>\n<\/span><span title=\"The CERT-GOV-MD is authorized to address all types of computer security incidents, which occur, or threaten to occur in Moldavian informational and telecommunication systems of public administration authorities and S.E.\">CERT-GOV-MD este autorizat s\u0103 abordeze toate tipurile de incidente de securitate informatic\u0103 care apar sau amenin\u021b\u0103 s\u0103 apar\u0103 \u00een sistemele informa\u021bionale \u0219i de telecomunica\u021bii ale autorit\u0103\u021bilor administra\u021biei publice \u0219i ale S.E. <\/span><span title=\"CTS networks and information systems. \">Re\u021belele CTS \u0219i sistemele informatice.<br \/>\n<\/span><span title=\"The level of support given by CERT-GOV-MD will vary depending on the type and severity of the incident or issue, the type of constituent, the size of the user community affected, and the CERT-GOV-MD's resources at the time,\">Nivelul de sprijin acordat de CERT-GOV-MD va varia \u00een func\u021bie de tipul \u0219i gravitatea incidentului sau a problemei, tipul de constituent, dimensiunea comunit\u0103\u021bii de utilizatori afectate \u0219i resursele CERT-GOV-MD la momentul respectiv, <\/span><span title=\"though in all cases some response will be made within one working day. \">de\u0219i \u00een toate cazurile un r\u0103spuns va fi f\u0103cut \u00een termen de o zi lucr\u0103toare.<br \/>\n<\/span><span title=\"Note that no direct support will be given to end users;\">Re\u021bine\u021bi c\u0103 nu se va acorda niciun sprijin direct utilizatorilor finali; <\/span><span title=\"they are expected to contact their system administrator, network administrator, or department head for assistance. \">este de a\u0219teptat ca ace\u0219tia s\u0103 contacteze administratorul de sistem, administratorul de re\u021bea sau directorul departamentului pentru asisten\u021b\u0103.<br \/>\n<\/span><span title=\"4.2 Co-operation, Interaction and Disclosure of Information \"><strong>4.2 Cooperarea, interac\u021biunea \u0219i dezv\u0103luirea informa\u021biilor<\/strong><br \/>\n<\/span><span title=\"CERT-GOV-MD exchanges all necessary information with other CSIRTs if they are CERT-GOV-MD partners in investigation of a security incident. \">CERT-GOV-MD face schimb de informa\u021bii cu alte CSIRT dac\u0103 sunt parteneri CERT-GOV-MD \u00een investigarea unui incident de securitate.<br \/>\n<\/span><span title=\"CERT-GOV-MD exchanges information with other parties only if all necessary measures were taken in order to prevent any form of identity disclosure, and, if this is not possible, only if CERT-GOV-MD is explicitly authorized by affected party. \">CERT-GOV-MD face schimb de informa\u021bii cu alte p\u0103r\u021bi numai dac\u0103 s-au luat toate m\u0103surile necesare pentru a preveni orice form\u0103 de divulgare a identit\u0103\u021bii \u0219i, dac\u0103 acest lucru nu este posibil, numai dac\u0103 CERT-GOV-MD este autorizat explicit de c\u0103tre partea afectat\u0103.<br \/>\n<\/span><span title=\"All sensitive data and information (personal data, system\/service configuration, vulnerabilities with their locations) are transmitted in encrypted form. \">Toate datele \u0219i informa\u021biile sensibile (date personale, configura\u021bie sistem \/ serviciu, vulnerabilit\u0103\u021bi cu loca\u021biile lor) sunt transmise \u00een form\u0103 criptat\u0103.<br \/>\n<\/span><span title=\"4.3 Communication and Authentication \"><strong>4.3 Comunicare \u0219i autentificare<\/strong><br \/>\n<\/span><span title=\"In view of the types of information that the CERT-GOV-MD will likely be dealing with, telephones will be considered sufficiently secure to be used even unencrypted.\">Av\u00e2nd \u00een vedere tipurile de informa\u021bii cu care se va ocupa probabil CERT-GOV-MD, telefoanele vor fi considerate suficient de sigure pentru a fi utilizate chiar \u0219i necriptate. <\/span><span title=\"Unencrypted e-mail will not be considered particularly secure, but will be sufficient for the transmission of low-sensitivity data.\">E-mail-urile necriptate nu vor fi considerate deosebit de sigure, dar vor fi suficiente pentru transmiterea datelor cu sensibilitate sc\u0103zut\u0103. <\/span><span title=\"If it is necessary to send highly sensitive data by e-mail, PGP will be used.\">Dac\u0103 este necesar s\u0103 trimite\u021bi date extrem de sensibile prin e-mail, se va utiliza PGP. <\/span><span title=\"Network file transfers will be considered to be similar to e-mail for these purposes: sensitive data should be encrypted for transmission. \">Transferurile de fi\u0219iere \u00een re\u021bea vor fi considerate ca fiind similare cu mesajele de po\u0219t\u0103 electronic\u0103 pentru aceste scopuri: datele sensibile ar trebui s\u0103 fie criptate pentru transmitere.<br \/>\n<\/span><span title=\"Where it is necessary to establish trust, for example before relying on information given to the CERT-GOV-MD, or before disclosing confidential information, the identity and bona fide of the other party will be ascertained to a reasonable degree of trust.\">\u00cen cazul \u00een care este necesar s\u0103 se creeze \u00eencredere, de exemplu, \u00eenainte de a se baza pe informa\u021biile furnizate CERT-GOV-MD sau \u00eenainte de a divulga informa\u021bii confiden\u021biale, identitatea \u0219i bun\u0103voin\u021ba celeilalte p\u0103r\u021bi vor fi constatate \u00eentr-un grad rezonabil de \u00eencredere. <\/span><span title=\"Within CERT-GOV-MD, and with known neighbor sites, referrals from known trusted people will suffice to identify someone.\">\u00cen cadrul CERT-GOV-MD \u0219i al unor site-uri vecine cunoscute, recomand\u0103rile unor persoane de \u00eencredere cunoscute vor fi suficiente pentru a identifica pe cineva. <\/span><span title=\"Otherwise, appropriate methods will be used, such as a search of FIRST members, the use of WHOIS and other Internet registration information, etc, along with telephone call-back or e-mail mail-back to ensure that the party is not an impostor\">\u00cen caz contrar, vor fi utilizate metode adecvate, cum ar fi c\u0103utarea membrilor FIRST, folosirea informa\u021biilor WHOIS \u0219i a altor informa\u021bii de \u00eenregistrare pe Internet etc., \u00eempreun\u0103 cu apelul telefonic sau e-mailul pentru a se asigura c\u0103 partidul nu este un impostor <\/span><span title=\".\">. <\/span><span title=\"Incoming e-mail whose data must be trusted will be checked with the originator personally, or by means of digital signatures (PGP in particular is supported). \">E-mailurile primite, ale c\u0103ror date trebuie s\u0103 fie sigure, vor fi verificate cu autorul personal sau cu semn\u0103turi digitale (\u00een special PGP este suportat).<\/span><\/p>\n<p><span title=\"5. Services \u00a0\u00a0\u00a0\u00a0\"><strong>5. Servicii<\/strong><\/span><\/p>\n<ul>\n<li><span title=\"Alerts and warnings \u00a0\u00a0\u00a0\u00a0\">Alerte \u0219i avertismente<br \/>\n<\/span><\/li>\n<li><span title=\"Artifact response \u00a0\u00a0\u00a0\u00a0\">R\u0103spunsul artifactului<br \/>\n<\/span><\/li>\n<li><span title=\"Artifact response coordination \u00a0\u00a0\u00a0\u00a0\">Armonizarea r\u0103spunsului artefactului<br \/>\n<\/span><\/li>\n<li><span title=\"Incident analysis \u00a0\u00a0\u00a0\u00a0\">Analiza incidentelor<br \/>\n<\/span><\/li>\n<li><span title=\"Incident response support \u00a0\u00a0\u00a0\u00a0\">Incidenta raspuns de sprijin<br \/>\n<\/span><\/li>\n<li><span title=\"Incident response coordination \u00a0\u00a0\u00a0\u00a0\">Coordonarea r\u0103spunsului la incidente<br \/>\n<\/span><\/li>\n<li><span title=\"Vulnerability analysis \u00a0\u00a0\u00a0\u00a0\">Analiza vulnerabilit\u0103\u021bii<br \/>\n<\/span><\/li>\n<li><span title=\"Vulnerability response \u00a0\u00a0\u00a0\u00a0\">Vulnerabilitate<br \/>\n<\/span><\/li>\n<li><span title=\"Vulnerability response coordination \u00a0\u00a0\u00a0\u00a0\">Responsabilitatea r\u0103spunsului la vulnerabilitate<br \/>\n<\/span><\/li>\n<li><span title=\"Intrusion detection services \u00a0\u00a0\u00a0\u00a0\">Servicii de detectare a intruziunilor<br \/>\n<\/span><\/li>\n<li><span title=\"Security-related information dissemination \u00a0\u00a0\u00a0\u00a0\">Diseminarea informa\u021biei legate de securitate<br \/>\n<\/span><\/li>\n<li><span title=\"Awareness building\">Constientizarea<\/span><\/li>\n<\/ul>\n<p><span id=\"result_box\" class=\"\" lang=\"ro\" tabindex=\"-1\"><strong>6. Formulare de raportare a incidentelor<\/strong><br \/>\nVersiunea actual\u0103 a formularului de raport de incident este disponibil\u0103 de la:<br \/>\n<a href=\"https:\/\/www.cert.gov.md\/incidente\/raportare-incidente.html\">www.cert.gov.md\/incidente\/raportare-incidente.html<\/a><\/span><br \/>\n<strong>7.D<span id=\"result_box\" class=\"short_text\" lang=\"ro\" tabindex=\"-1\"><span class=\"\">eclin\u0103ri<\/span><\/span><\/strong><br \/>\n<span class=\"\">De\u0219i toate precau\u021biile vor fi luate \u00een preg\u0103tirea informa\u021biilor, notific\u0103rilor \u0219i alertelor, CERT-GOV-MD nu \u00ee\u0219i asum\u0103 nicio responsabilitate pentru erorile sau omisiunile sau pentru pagubele rezultate din utilizarea informa\u021biilor con\u021binute \u00een acesta.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>1. Despre acest document 1.1 Data ultimei actualiz\u0103ri Aceasta este versiunea 2.0, publicat\u0103 12.04.2018 1.2 Lista distribu\u021biei pentru notific\u0103ri Nu sunt disponibile 1.3 Loca\u021bii unde acest document poate fi g\u0103sit Cea mai recent\u0103 versiune a acestui document de descriere a CSIRT este disponibil\u0103 pe site-ul CERT-GOV-MD: cert.gov.md\/desprecsc\/csirt-description-rfc-2350.htmlV\u0103 rug\u0103m s\u0103 v\u0103 asigura\u021bi c\u0103 utiliza\u021bi cea mai recent\u0103 versiune. 2.Contacta\u021bi informa\u021biile 2.1 Numele echipei &#8222;Cyber \u200b\u200bSecurity Centre CERT-GOV-MD&#8221; 2.2 Adresa Cancelaria de Stat a Republicii Moldova Centrul de Telecomunica\u021bii Speciale S.E. Centrul de Securitate Cyber \u200b\u200bCERT-GOV-MD Republica Moldova Pia\u021ba Marii Adun\u0103ri Na\u021bionale, 1 mun. Chi\u0219in\u0103u, MD-2033 2.3 Fusul orar GMT + 0200 \u0219i GMT + 0300 din aprilie p\u00e2n\u0103 \u00een octombrie 2.4 Num\u0103r de telefon (+373 22) 820-900 (cere\u021bi CERT-GOV-MD) 2.5 Num\u0103rul faxului (+373 22) 250 522 2.6 Alte telecomunica\u021bii Nu sunt disponibile 2.7 Adresa de po\u0219t\u0103 electronic\u0103 Pentru incidente: incidents@cert.gov.md Pentru alte \u00eentreb\u0103ri: info@cert.gov.md 2.8 Cheile publice \u0219i alte informa\u021bii despre criptare CERT-GOV-MD are o cheie PGP, ale c\u0103rei detalii sunt: ID-ul utilizatorului: CSC CERT-GOV-MD (Centrul de securitate cibernetic\u0103 CERT-GOV-MD Contact oficial) &lt;info@cert.gov.md&gt; ID-ul cheie: 0x0A921FED Amprent\u0103: 1697 36E5 04BC EE1B 99F5 EA52 0D53 FFE2 0A92 1FED Cheia public\u0103 a CERT-GOV-MD este disponibil\u0103 de la: https:\/\/cert.gov.md\/fileadmin\/user_upload\/pub_key\/0x0A921FED.asc 2.9 Alte informa\u021bii Informa\u021bii generale despre CERT-GOV-MD, precum \u0219i linkuri c\u0103tre diferite resurse de securitate recomandate pot fi g\u0103site la: www.cert.gov.md 2.10 Punctele de contact ale clien\u021bilor Metoda preferat\u0103 de contactare a CERT-GOV-MD este prin e-mail la info@cert.gov.md; e-mailul trimis la aceast\u0103 adres\u0103 va &#8222;bifa&#8221; persoana responsabil\u0103 sau va fi \u00eenaintat\u0103 automat persoanei de rezerv\u0103 corespunz\u0103toare. Dac\u0103 ave\u021bi nevoie de asisten\u021b\u0103 urgent\u0103, pune\u021bi &#8222;urgent&#8221; \u00een linia subiectului. \u00cen cazul \u00een care nu este posibil (sau nu este recomandat din motive de securitate) utilizarea e-mail-ului, CERT-GOV-MD se poate ajunge prin telefon \u00een timpul orelor de program regulate. Durata de func\u021bionare a CERT-GOV-MD este \u00een general limitat\u0103 la orele de program regulate (08: 00-17: 00 de luni p\u00e2n\u0103 vineri, cu excep\u021bia s\u0103rb\u0103torilor oficiale). Dac\u0103 este posibil, atunci c\u00e2nd trimite\u021bi raportul dvs., utiliza\u021bi formularul de la adresa www.cert.gov.md\/incidente\/raportare-incidente.html3. Carta 3.1 Declara\u021bia de misiune a Misiunea noastr\u0103 este de a contribui la protejarea informa\u021biilor, a resurselor \u0219i a sistemelor de telecomunica\u021bii ale cet\u0103\u021benilor no\u0219tri de accesul neautorizat, folosirea ilegal\u0103 \u0219i \u00eenc\u0103lcarea acestuia este confiden\u021bialitatea, integritatea \u0219i disponibilitatea. Obiectivele CERT-GOV-MD sunt: Manipularea rapoartelor privind incidentele informatice, examinarea preliminar\u0103 a faptelor \u0219i a situa\u021biei pe baza informa\u021biilor primite, furnizarea de asisten\u021b\u0103 de urgen\u021b\u0103 utilizatorilor pentru a preveni atacurile de tip hacker \u0219i viru\u0219i c\u0103tre sistemele informatice. Notificarea \u00een timp util a organiza\u021biilor competente din Republica Moldova a amenin\u021b\u0103rilor emergente la adresa securit\u0103\u021bii informatice, distribuirea de informa\u021bii pentru a le preveni. Interac\u021biunea \u0219i cooperarea cu CERT str\u0103ine privind sprijinul juridic al securit\u0103\u021bii informa\u021biilor, schimbul de informa\u021bii \u0219i experien\u021ba cu ace\u0219tia. S\u0103 elaboreze recomand\u0103ri c\u0103tre utilizatori cu privire la utilizarea celor mai eficiente practici de securitate pentru a preveni p\u0103trunderea ilegal\u0103 a sistemelor informatice. 3.2 Circumscrip\u021bia electoral\u0103 Reprezentan\u021ba CERT-GOV-MD este reprezentat\u0103 de autorit\u0103\u021bile centrale \u0219i regionale de guvernare, organele specializate de securitate \u0219i telecomunica\u021bii de stat, academiile \u0219i universit\u0103\u021bile din Republica Moldova, a\u0219a cum sunt definite \u00een Hot\u0103r\u00e2rea Guvernului nr. 840 din 26.07.2004 \u0219i anexa nr. Domeniul de domeniu \u0219i \/ sau adresa IP care descriu circumscrip\u021bia electoral\u0103: AS25319 \u0219i AS39279 3.3 Sponsorizarea \u0219i \/ sau afilierea CERT-GOV-MD este sponsorizat de Centrul de Telecomunica\u021bii Speciale S.E. Acesta men\u021bine afilieri cu diverse CSIRT-uri pe o baz\u0103 necesar\u0103. 3.4 Autoritatea Autoritatea CERT-GOV-MD se ocup\u0103 de sistemele informa\u021bionale \u0219i de telecomunica\u021bii ale autorit\u0103\u021bilor administra\u021biei publice (AS25319 \u0219i AS39279) \u0219i este limitat\u0103 de rolul organiza\u021biei sponsorizate S.E. CTS. 4. Politici 4.1 Tipuri de incidente \u0219i nivel de sus\u021binere CERT-GOV-MD este autorizat s\u0103 abordeze toate tipurile de incidente de securitate informatic\u0103 care apar sau amenin\u021b\u0103 s\u0103 apar\u0103 \u00een sistemele informa\u021bionale \u0219i de telecomunica\u021bii ale autorit\u0103\u021bilor administra\u021biei publice \u0219i ale S.E. Re\u021belele CTS \u0219i sistemele informatice. Nivelul de sprijin acordat de CERT-GOV-MD va varia \u00een func\u021bie de tipul \u0219i gravitatea incidentului sau a problemei, tipul de constituent, dimensiunea comunit\u0103\u021bii de utilizatori afectate \u0219i resursele CERT-GOV-MD la momentul respectiv, de\u0219i \u00een toate cazurile un r\u0103spuns va fi f\u0103cut \u00een termen de o zi lucr\u0103toare. Re\u021bine\u021bi c\u0103 nu se va acorda niciun sprijin direct utilizatorilor finali; este de a\u0219teptat ca ace\u0219tia s\u0103 contacteze administratorul de sistem, administratorul de re\u021bea sau directorul departamentului pentru asisten\u021b\u0103. 4.2 Cooperarea, interac\u021biunea \u0219i dezv\u0103luirea informa\u021biilor CERT-GOV-MD face schimb de informa\u021bii cu alte CSIRT dac\u0103 sunt parteneri CERT-GOV-MD \u00een investigarea unui incident de securitate. CERT-GOV-MD face schimb de informa\u021bii cu alte p\u0103r\u021bi numai dac\u0103 s-au luat toate m\u0103surile necesare pentru a preveni orice form\u0103 de divulgare a identit\u0103\u021bii \u0219i, dac\u0103 acest lucru nu este posibil, numai dac\u0103 CERT-GOV-MD este autorizat explicit de c\u0103tre partea afectat\u0103. Toate datele \u0219i informa\u021biile sensibile (date personale, configura\u021bie sistem \/ serviciu, vulnerabilit\u0103\u021bi cu loca\u021biile lor) sunt transmise \u00een form\u0103 criptat\u0103. 4.3 Comunicare \u0219i autentificare Av\u00e2nd \u00een vedere tipurile de informa\u021bii cu care se va ocupa probabil CERT-GOV-MD, telefoanele vor fi considerate suficient de sigure pentru a fi utilizate chiar \u0219i necriptate. E-mail-urile necriptate nu vor fi considerate deosebit de sigure, dar vor fi suficiente pentru transmiterea datelor cu sensibilitate sc\u0103zut\u0103. Dac\u0103 este necesar s\u0103 trimite\u021bi date extrem de sensibile prin e-mail, se va utiliza PGP. Transferurile de fi\u0219iere \u00een re\u021bea vor fi considerate ca fiind similare cu mesajele de po\u0219t\u0103 electronic\u0103 pentru aceste scopuri: datele sensibile ar trebui s\u0103 fie criptate pentru transmitere. \u00cen cazul \u00een care este necesar s\u0103 se creeze \u00eencredere, de exemplu, \u00eenainte de a se baza pe informa\u021biile furnizate CERT-GOV-MD sau \u00eenainte de a divulga informa\u021bii confiden\u021biale, identitatea \u0219i bun\u0103voin\u021ba celeilalte p\u0103r\u021bi vor fi constatate \u00eentr-un grad rezonabil de \u00eencredere. \u00cen cadrul CERT-GOV-MD \u0219i al unor site-uri vecine cunoscute, recomand\u0103rile unor persoane de \u00eencredere cunoscute vor fi suficiente pentru a identifica pe cineva. \u00cen caz contrar, vor fi utilizate metode adecvate, cum ar fi c\u0103utarea membrilor FIRST, folosirea informa\u021biilor WHOIS \u0219i a altor informa\u021bii de \u00eenregistrare pe Internet etc., \u00eempreun\u0103 cu apelul telefonic sau e-mailul pentru a se asigura c\u0103 partidul nu este un impostor . E-mailurile primite, ale c\u0103ror date trebuie s\u0103 fie sigure, vor fi verificate&#8230;<\/p>\n","protected":false},"author":3,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"about.php","meta":{"_locale":"ro_RO","_original_post":"523","footnotes":""},"class_list":["post-641","page","type-page","status-publish","hentry","ro-RO"],"_links":{"self":[{"href":"https:\/\/cert.md\/wp-json\/wp\/v2\/pages\/641","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.md\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/cert.md\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/cert.md\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.md\/wp-json\/wp\/v2\/comments?post=641"}],"version-history":[{"count":1,"href":"https:\/\/cert.md\/wp-json\/wp\/v2\/pages\/641\/revisions"}],"predecessor-version":[{"id":642,"href":"https:\/\/cert.md\/wp-json\/wp\/v2\/pages\/641\/revisions\/642"}],"wp:attachment":[{"href":"https:\/\/cert.md\/wp-json\/wp\/v2\/media?parent=641"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}