AM-CERT studies, coordinates, and responds to cybersecurity incidents threatening Armenia's national critical infrastructure. It also serves as a national contact point for international and domestic cooperation in the cybersecurity field.

AM-CERT's main functions are:

• Response to cyber incidents,
• Monitoring of the external attack environment,
• Detection of potential data leaks,
• Notification about current cyber threats,
• Installation of honeypot systems,
• Review and improvement of incident response plans

Response to Cyber Incidents

In case of a cyber incident, the AM-CERT team determines its priority according to the incident categorization mechanism. Information related to the incident is classified and sent to relevant partners. Afterwards, the incident resolution process begins.

You can report a cyber incident to us via this link. (URL to the incident reporting page)

External Attack Surface Monitoring (EASM)

• The public IP addresses of our partner organizations are constantly monitored and notifications about relevant cyber threats are shared with them.
• Partner organizations are provided with information about cyber threats related to their external network (for example, warning about firewall misconfiguration or vulnerability in an email server).

Detection of Potential Data Leaks

Sensitive data provided by partner organizations (e.g., domains, usernames) is constantly monitored to detect possible leaks.

Become a stakeholder

Installation of Honeypot Systems

AM-CERT's functions also include the installation of honeypot systems in the DMZ layer of partner organizations' networks, which allows monitoring of external and internal attacks and threats, as well as providing stakeholders with information about cyber threats.

Review and Improvement of Incident Response Plan

The team also provides incident response plan review services based on recommendations from the National Institute of Standards and Technology (NIST) and the needs of the agencies working with us.