Community Slack Guidelines

The CyberRisk Alliance’s CyberRisk Collaborative’s Community Slack is an exclusive, vendor free, peer collaboration space for cybersecurity leaders. Chatham House Rules apply to all discussions. CRA assumes no responsibility to actively monitor the forum and does not endorse any posts or discussions. Although CRA has no obligation to screen, edit, or monitor content, we may edit, delete, or remove content or ban members at any time and for any reason, with or without notice.

‍

You may not create, post, store, or share any information that violates your company’s confidentiality policies or the Chatham House Rules. You represent and warrant that your discussions will not violate any rights of or cause injury to any person or entity. You will not use the identity of any other person. You will not (and will not allow or authorize any third-party to) post, upload to, transmit, distribute, store, create, solicit, disclose, or otherwise publish through the forum any content that:

1. Is unlawful, libelous, defamatory, obscene, pornographic, indecent, lewd, suggestive, harassing, threatening, invasive of privacy or publicity rights, abusive, inflammatory, or fraudulent;
2. Is, in CRA’s judgment, disrespectful, inappropriate, or may expose CRA, our users, or others to discomfort, harm, or liability;
3. May infringe the patent, trademark, trade secret, copyright, intellectual, privacy, or proprietary right of any party;
4. Is confidential, contains confidential information related to your business, or solicits confidential information from any party;
5. Would constitute, encourage, or provide instructions for a criminal offense, violate the rights of any party, or otherwise create liability or violate any local, state, national, or international law;
6. Includes any incorrect or inaccurate statements or claims, or statements or claims that do not reflect your honest views and experiences;
7. Contains any unsolicited marketing promotions, political campaigning, advertising, or solicitations;
8. Contains any information regarding trading, public exchanges, or violate any SEC regulations;
9. Contains any private information of you or any third parties, including addresses, phone numbers, and payment card information; or
10. Contain viruses, corrupted data, or other harmful, disruptive, or destructive files.

‍

In addition, CRA requests that you abide by the following guidelines:

1. STAY RELEVANT
   1. This forum is oriented towards security leaders and their teams. If a post has very basic information, it is not appropriate for this forum.
   2. Basic questions on security concepts and fundamentals are not appropriate for this forum. Unless it is in regard to security awareness and training. For example, “why passwords are important” is too fundamental.
2. SECURITY FIRST
   1. This is the guiding principle for all posts. No editorializing and no political agendas. Posts discussing political issues that affect security are appropriate, but the post must be geared towards the security implication. Such posts will be heavily monitored, and comments may be deleted as needed.
   2. We reserve the right to delete comments at our discretion and remove repeat offenders. We will remove content that is fraudulent, deceptive, or misleading.
   3. Always practice OPSEC principles when posting or commenting. CRA is not responsible for maintaining the confidentiality of information shared between members or publicly.
3. CIVILITY
   1. We are all professionals. Be excellent to each other.
   2. Respect that other people in the community have had different life experiences and may have a different perspective to yours. We welcome different viewpoints.
   3. We don’t allow defamatory, indecent, offensive, profane, discriminatory, misleading, unlawful or threatening comments.
   4. Personal attacks, name-calling, trolling and abuse will not be tolerated.
4. NO ADVERTISING
   1. No advertising of any services offered by or in connection to either yourself, organization, or affiliates. However, suggesting tools, vendors and services you have utilized and had a good experience with or in response to an ask is appropriate and encouraged.

Slack Organization

• Channels – open to all members
  • The Collaborative – Open channel for all members. Please feel free to post questions, seek advice and collaborate with your peers.
  • Please always “thread” responses to posts instead of responding in the main channel, “threading” opens a secondary chat window separate from the main channel. You can do so by hovering your mouse over the post and clicking “reply” (shows up on top right) this keeps our channels organized and easy to comprehend with a large community.

• Statuses – Statuses let members know what other members they can directly contact or “DM”. If someone’s status is set, please respect it.

• Display Name – Each user will have a “Display Name” that lists their first name, position, and organization. The Best Practice for this community is to list your
  First Name, Title, Organization i.e., John, CISO, CyberRisk Alliance.
  • Select your “profile” icon on the top right of the screen.
  • Then select “edit profile.”
  • Then select the “display name” box and fill in your information.