Objective of the Security Team

Our goal is to protect the digital assets of the organization and minimize the impacts of cyber threats through timely detection, response, and prevention of security incidents. We actively monitor risks, analyze vulnerabilities, and ensure that security measures correspond to current threats.

Legal Framework

Based on the decision of NÚKIB dated November 20, 2018, ZONER, a.s. was designated as a provider of essential services under Act No. 181/2014 Coll., on Cybersecurity.

We operate an information system for the essential service: Providing domain name system (DNS) services on the internet. As a regulated entity, we are required by Decree No. 82/2018 Coll. to implement security measures, which include organizational measures for managing security incidents. These requirements are met by the internal CSIRT-ZONER team.

Scope of Activities

The CSIRT team oversees:

• Internal IT infrastructure of ZONER, a.s.
• Server operations in our data center
• Essential DNS service according to the law
• Services provided to customers (web hosting, cloud, DNS)

Team Responsibilities

The CSIRT-ZONER team ensures key security activities within the protection of the company's IT infrastructure. The main activities include:

• Response to security incidents and their analysis
• Monitoring and detection of cyber threats
• Forensic analysis
• Management of ISZS security measures
• Internal training in cybersecurity

Collaboration with Other Teams

We collaborate with other Czech teams for better information exchange. Our main partners include:

• CSIRT teams of other web hosting companies
• Project FENIX
• CSIRT.CZ (National CSIRT)
• CZ.NIC-CSIRT
• NÚKIB

The CSIRT-ZONER team is working to be listed as Listed on the TF-CSIRT Trusted Introducer list.

Team Composition

The CSIRT-ZONER team consists of experts with long-term experience in the company and knowledge in the IT field. It also includes representatives from the ZONER AntiVirus team, which protects employees and customers from 0-day vulnerabilities.

• Head of the CSIRT Team: Ing. Jindřich Zechmeister, director of the IT security and internet services division
• Cybersecurity Manager: Ing. Jindřich Zechmeister
• Other team members work in positions such as technical director, senior server administrators (asset owners), network administrators, and members of the ZONER AntiVirus team.

Contact

You can use the contacts below to report incidents or any other reason to contact our CSIRT team. You can also use the reporting form and for sensitive data encryption with PGP.

• Email: Primarily use csirt(at)zoner.com; if you want to use PGP, write to security(at)zoner.com
• PGP key security(at)zoner.com: Download public key
• Phone: +420 603 196 637
• Operating hours: 24/7
• Incident reporting: Report incidents via email or using the incident reporting form

Detailed information according to RFC 2350 can be found here.

Downloadable Documents

These documents relate to the operations of the CSIRT-ZONER team.

• Policies of the CSIRT-ZONER Security Team
• Incident Response Policy