-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# CERT Pocztowy RFC 2350 EN

## Metadata

### Document version

2026.1

### Document location

The current version of the document is located at

https://www.poczta-polska.pl/files/policies/rfc2350/en/rfc2350.txt

### TLP Classification

**TLP: WHITE**

## Name of the team

Full name: *Polish Post Computer Emergency Response Team*

Short name: *CERT Pocztowy*

## Contact information

### Mailing address

Departament Cyberbezpieczeństwa i Standardów
Poczta Polska S.A.
Rodziny Hiszpańskich 8
00-940 Warszawa
Poland

### Time Zone

CET/CEST

### Telephone Number

+48 22 6565145

### E-mail address

Incident reporting: `incydent@poczta-polska.pl` (24/7/365 service)

General enquiries: `cert@poczta-polska.pl` (business hours service)

### Web page

  https://www.poczta-polska.pl/kontakt/cert-pocztowy/

### Encryption keys

OpenPGP: `9DCD82ECE420B919 CERT Pocztowy <cert@poczta-polska.pl>`

Primary key fingerprint:

  099E A302 D38B F918 45DA    3583 9DCD 82EC E420 B919

See end of this file for the public key.

## Charter

### Mission statement

The mission of CERT Pocztowy is to defend the Polish Post Group of
organizations and their customers against cyberattacks and
cyberthreats. This involves detection, response and mitigation of
cyberattacks against the Polish Post infrastructure, and those
cyberthreats that use the trademarks and intellectural properties of
Polish Post to impersonate the Post as means of fraud or other
cyberattacks.

### Constituency

The constituency of CERT Pocztowy is defined as the all organizations
belonging to the Polish Post Group and their customers regarding
attacks that impersonate the Polish Post and its services.

### Affiliation

CERT Pocztowy is a part of the Informatiion Technology and
Telecommunications Departament of the Polish Post (Poczta Polska
S. A.).

## Incident Reporting

Incidents should be reported by an e-mail, sent to the
`cert@poczta-polska.pl` address. In the e-mail please include:

 - time and date of the incident

 - description of the incident or event

 - source of the incident (IP address, email address, telephone
   number), when applicable

 - URL address associated with the incident, when applicable

 - copies of relevant information (messages received) or screenshots
   when sending copies is not feasible (for example, SMS messages)

 - contact information of the reporter, should further inquiries
   be needed.

If the incident information includes sensitive information (for
example Personally Identifiable Information as defined by the General
Data Protection Directive of the European Union), encryption using the
above OpenPGP key must be used. Please also tag the messages that
contain sensitive data by `[SENSITIVE]` tag in the e-mail message
subject.

We support the use of the Traffic Light Protocol, so the messages
containing TLP-marked information by using the `[TLP: COLOR]` tag in
message subjects in addition to using encryption.

If the incident involves e-mail messages, please provide them in full
(`.eml` format) by exporting them from your email application them as
files including the full header information.

## OpenPGP Encryption key

- -----BEGIN PGP PUBLIC KEY BLOCK-----
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=rVK6
- -----END PGP PUBLIC KEY BLOCK-----
-----BEGIN PGP SIGNATURE-----
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=Qybv
-----END PGP SIGNATURE-----