Bangladesh CERT

Bangladesh CERT
Name	Bangladesh CERT
Native name	বাংলাদেশ সাটারিটি প্রতিক্রিয়া দল
Formed	2015
Headquarters	Dhaka
Jurisdiction	Bangladesh
Parent agency	Bangladesh Computer Council

Bangladesh CERT Bangladesh CERT is the national computer emergency response team for Bangladesh, established to coordinate cybersecurity incident handling, vulnerability management, and capacity building. It operates within the Bangladesh Computer Council framework and interacts with international bodies such as FIRST and APCERT to align with global cybersecurity practices. The organization engages with public-sector entities including the Ministry of Posts, Telecommunications and Information Technology, state corporations like Bangladesh Bank, and academic institutions such as the Bangladesh University of Engineering and Technology.

History

Bangladesh CERT was formed amid rising concerns following incidents affecting agencies including Bangladesh Bank heist-related intrusions and breaches involving entities like Sonali Bank and Rupali Bank. Its early development drew on models from established teams such as the United States Computer Emergency Readiness Team, CERT-UK, and CERT-In. Key milestones include partnerships with regional actors like APCERT and participation in exercises similar to the Cyber Storm series. Leadership changes and strategic plans referenced national initiatives from the Digital Bangladesh vision and infrastructure projects like the Bangladesh Hi-Tech Park Authority deployments.

Organization and Governance

The CERT operates under the administrative oversight of the Bangladesh Computer Council and coordinates with ministries including the Ministry of Home Affairs and the Ministry of Finance. Governance structures reflect practices used by entities like NIST-aligned frameworks and standards promulgated by bodies such as the International Organization for Standardization in ISO/IEC 27001 contexts. Operational units within the CERT liaise with regulators such as the Bangladesh Telecommunication Regulatory Commission and financial supervisors like the Bangladesh Securities and Exchange Commission for sectoral incident handling. Advisory input has come from universities including Dhaka University and research centers analogous to BSSS initiatives.

Roles and Responsibilities

Primary responsibilities include coordination of responses to incidents impacting infrastructure operated by agencies like Bangladesh Power Development Board, dissemination of advisories similar to alerts from ENISA, and vulnerability disclosure processes modeled after CERT Coordination Center practices. The CERT issues advisories to stakeholders such as Grameenphone, Robi Axiata, and state-owned enterprises like Petrobangla. It also supports continuity planning for sectors overseen by the Bangladesh Inland Water Transport Authority and critical services used by institutions like Bangladesh Railway and Civil Aviation Authority of Bangladesh.

Incident Response and Services

Services provided include 24/7 incident intake comparable to mechanisms used by US-CERT, malware analysis akin to labs at VirusTotal partners, digital forensics support aligned with protocols from INTERPOL cybercrime units, and CERT-style vulnerability coordination similar to CERT/CC processes. The team conducts threat intelligence sharing with peers such as JPCERT/CC and KISA, produces situational reports reflecting indicators of compromise seen in campaigns attributed to actors tracked by Mandiant and CrowdStrike, and offers mitigation guidance to enterprises including BRAC and BEXIMCO.

Collaboration and Partnerships

Bangladesh CERT collaborates with international organizations such as FIRST, regional groups like APCERT, and bilateral partners including counterparts in India, China, and United Kingdom. It engages with multilateral institutions such as the World Bank on resilience projects and technology transfer initiatives similar to programs run by the Asian Development Bank. Academic collaborations have included research with BUET, North South University, and training links to platforms associated with Cisco Networking Academy and Microsoft security initiatives. Law enforcement cooperation involves agencies like Rapid Action Battalion and liaison with global policing bodies including Europol.

Capacity Building and Awareness

Capacity activities encompass training programs modeled on SANS Institute curricula, national exercises inspired by Cyber Europe, and public awareness campaigns resembling those by StaySafeOnline. Workshops target personnel from banks like Islami Bank Bangladesh Limited and utilities such as Dhaka Water Supply and Sewerage Authority, while university outreach includes partnerships with Bangladesh University of Professionals and technical colleges tied to ICT Division skilling drives. The CERT supports cybersecurity competitions patterned after DEF CON CTF and student engagement through forums similar to IEEE chapters.

Legal and Regulatory Framework

Operations occur within statutory and policy frameworks influenced by instruments such as the Information and Communication Technology Act, 2006 and national policies reflecting the Digital Security Act. Coordination with regulators includes the Bangladesh Telecommunication Regulatory Commission for incident reporting rules and alignment with financial compliance regimes administered by Bangladesh Bank. International legal cooperation leverages mutual assistance approaches seen in treaties like the Budapest Convention on Cybercrime—where applicable through bilateral arrangements—and engagement with norms promoted by the United Nations cyber policy dialogues.

Category:Computer emergency response teams Category:Cybersecurity in Bangladesh Category:Government agencies of Bangladesh