JCSC Governance

The work of Jersey Cyber Security Centre (JCSC) is governed by a range of policies, including those set by the Government of Jersey, the international Cyber Security Incident Response Team (CSIRT) community, and those implemented by JCSC itself.  This includes:

RFC 2350

The RFC2350 contains a description of JCSC (previously CERT.JE) in accordance with the Internet Society Request for Comment (RFC) 2350, “Expectations for Computer Security Incident Response”. It provides basic information about JCSC, its channels of communication and its roles and responsibilities.

You can read JCSC’s RFC 2350 here.

JCSC Privacy Policy

The Privacy Policy outlines how JCSC collects data about individuals, what information we collect, how we use collected information, and how we store it. It also sets out individuals’ rights under the Data Protection (Jersey) Law 2018.

You can read the full Privacy Policy here.

Code of Conduct

The Code of Conduct sets out standards of behaviour for the JCSC team. It includes expectations of the JCSC as members of the States of Jersey Public Service, and as members of the Forum of Incident Response and Security Teams (FIRST).

You can read the full Code of Conduct here.