RFC-2350

Date of last update

This is version 4.0, published on September 24, 2025.

Distribution List for Notifications

KPN-CERT does not provide a mailing list for notifications and updates.

Here you'll Find the Original Document

This page contains the current version of the RFC-2350 document . Make sure you are using the most recent version.

Team Name

KPN-CERT: The KPN Computer Emergency Response Team.

Address

Koninklijke KPN N.V.
Attn: KPN-CERT
Witte Kruislaan 47a
1217AM Hilversum

Time Zone

KPN-CERT uses Central European Time (CET), including Daylight Saving Time (DST). As such, it is GMT +0100 in the winter and GMT +0200 in the summer.

Telephone Number

KPN-CERT can only be reached by phone for KPN employees.

General contact information of KPN (Dutch)

Email Address

The KPN-CERT can be reached via cert@kpn-cert.nl (primary email address) and info@kpn-cert.nl (for general inquiries only).

In addition to the email addresses listed above, each team member has a personal email address within the @kpn-cert.nl domain. However, for all communication regarding incidents, inquiries, and similar matters, only the above-mentioned email addresses should be used.

General contact information of KPN (Dutch)

Fax Number

None

Other Communication

None

Mission

KPN-CERT responds to security incidents, enforces mitigation, conducts forensic investigations, collects and analyzes threats, and functions as an advisory body in security-related matters.

Constituency

KPN-CERT is appointed to improve the digital security of KPN and its services.

Sponsorship and/or Affiliation

KPN-CERT is part of and funded by KPN.

Authority

KPN-CERT is part of CISO and reports directly to the KPN Board of Directors. KPN-CERT operates with the authority of CISO.

Incident Types and Support Level

KPN-CERT is authorized to address all types of security incidents that occur or threaten to occur at KPN.

Collaboration, Communication, and Information Publication

KPN-CERT is a member of various intelligence-sharing communities and works closely with other CERT/CSIRT teams worldwide.

There are legal restrictions and KPN policies on the sharing of information by KPN-CERT. All appropriate measures are taken to respect the confidentiality of team members, KPN systems, and groups of people and organizations. We do not provide personal or technical information about customers in compliance with the law.

Communication and Authentication

Communication takes place through various means, such as phone, email, and in-person. The identity of the communicating party will be verified using the resources available to the CERT.

Incident Response

All reported incidents are triaged by the Security Operations Center, which is staffed 24/7. In an emergency, the Security Operations Center will contact the KPN-CERT on-call service. All reported incidents are assessed based on risk, impact, and priority and are handled accordingly.

Incident Coordination

During the resolution of an incident, various steps can be taken, including:

• Determining the initial cause of the incident (exploited vulnerability).
• Facilitating contact with other involved parties.
• Facilitating contact with government authorities.
• Notifying other CERT/CSIRT teams.
• Composing announcements to users.
• Escalation and/or crisis management.

Incident Resolution

KPN-CERT is the point of contact for coordinating the resolution of security incidents. This includes enforcing mitigation strategies and leading forensic investigations.

Proactive Activities

KPN-CERT proactively gathers risk intelligence and distributes it where necessary, both within and outside the organization.

KPN-CERT is not able to guarantee the availability and accuracy of all information on this site. Under no circumstances will KPN-CERT be responsible for damage caused by the absence or inaccuracy of information on this site.