Expectations for Computer Security Incident Response
CERT-MZ — RFC 2350 Profile
This document describes CERT-MZ in accordance with RFC 2350. It provides basic information about the team, its services and its policies, so that constituents and other incident response teams know what to expect when working with us.
1. Document Information
1.1 Date of Last Update
October 11, 2026 (Version 1.0)
1.2 Distribution List for Notifications
Notifications of changes to this document are published on the official website: https://cert.mz
1.3 Locations Where This Document May Be Found
The current version of this document is available at https://cert.mz/rfc2350
1.4 Authenticating This Document
This document is published only on the official CERT-MZ website. Any copy obtained elsewhere should be verified against the version at the address above.
2. Contact Information
2.1 Name of the Team
CERT-MZ
2.2 Address
Avenida Agostinho Neto, 829
Maputo, Mozambique
2.3 Time Zone
Central Africa Time (CAT), UTC+2:00
2.4 Telephone Number
No public telephone contact is available at this time.
2.5 Electronic Mail Address
General enquiries: info@cert.mz. Incident reports: incident@cert.mz
2.6 Public Cryptographic Keys
An official PGP public key for CERT-MZ will be provided and published at a later stage. In the interim, sensitive communications should be coordinated via incident@cert.mz.
2.7 Team Members and Leadership
Operations and coordination are managed by the CERT-MZ Coordinator and the on-duty incident response team.
2.8 Other Information
CERT-MZ is one of the computer security incident response teams operating in Mozambique.
2.9 Points of Customer Contact
The preferred and only point of contact for incident reports is incident@cert.mz. Reports are handled during business hours — Monday to Friday, 08:00–17:00 CAT (UTC+2:00), excluding Mozambican national public holidays — and treated confidentially. Outside business hours, the 24/7 security operations centre monitors incoming reports on a best-effort basis.
3. Charter
3.1 Mission Statement
To promote a culture of information security and to coordinate the response to cybersecurity incidents affecting the CERT-MZ constituency in Mozambique.
3.2 Constituency
Organizations, businesses and citizens within the CERT-MZ constituency in Mozambique.
3.3 Sponsorship and/or Affiliation
CERT-MZ operates as an independent incident response team and has no parent or sponsoring organization.
3.4 Authority
CERT-MZ acts in a coordination and advisory capacity. It has no authority to compel action within constituent systems; final responsibility for systems remains with their owners and operators.
4. Policies
4.1 Types of Incidents and Level of Support
CERT-MZ handles computer security incidents affecting its constituency, including phishing and online fraud, malware and ransomware, compromised accounts or systems, website defacement, data breaches, denial of service attacks, and vulnerabilities in Mozambican systems. Support is provided on a best-effort basis, prioritized by severity and impact on the constituency.
4.2 Co-operation, Interaction and Disclosure of Information
CERT-MZ cooperates with other CSIRTs and incident response teams, nationally and internationally, in line with established community practices. Information received is used only for incident response purposes and is not disclosed to third parties without the reporter's consent, unless required by law.
4.3 Communication and Authentication
E-mail is the primary communication channel. Until an official PGP key is published, sensitive information should be shared only after coordination through incident@cert.mz.
5. Services
5.1 Incident Response
CERT-MZ provides incident triage, coordination and qualified technical assistance for the resolution and mitigation of reported cybersecurity incidents.
5.2 Proactive Activities
CERT-MZ monitors the threat landscape, issues alerts and early warnings on critical vulnerabilities, and disseminates threat intelligence and best-practice guidance to raise the digital maturity of its constituency.
6. Incident Reporting Forms
No standardized reporting form is currently in use. Reports should be sent by e-mail to incident@cert.mz and should include, where possible:
- Date and time of the incident (with timezone)
- Affected systems and IP addresses
- A description of what was observed
- Logs, e-mail headers or screenshots
- Actions already taken
- Contact details for follow-up
7. Disclaimers
While every precaution is taken in the preparation of information, notifications and alerts, CERT-MZ assumes no responsibility for errors or omissions, or for damages resulting from the use of the information contained herein.