US-CERT Security Policy

How we handle the information we gather when you visit our web site:

We collect and store only the following information about you: The name of the domain from which you access the Internet (i.e., aol.com, if you are connecting from an aol account, or msn.com if you are connecting from the MSN domain); the date and time you access our site; the item you requested from the server; and the Internet address of the web site from which you linked directly to our site. Except as outlined in the Security section at the bottom of this document, we do not track or look at individuals' usage behavior. If you identify yourself by sending an E-mail: When you send us personally-identifying information, (e.g., in an electronic mail message containing a question or comment), or by filling out a form that E-mails us this information, we use this information to respond to your request. We want to make it clear that we will not obtain personally-identifying information about you when you visit our site, unless you choose to provide such information to us. Except for authorized law enforcement investigations, or as otherwise required by law, we do not share any information we receive with any outside parties.

Links to other sites:

The documents posted on this Website may contain hypertext links or pointers to information created and maintained by other public and private organizations. These links and pointers are provided for visitors' convenience. US-CERT does not control or guarantee the accuracy, timeliness, or completeness of any linked information from non-US-CERT sites.

The inclusion of links or pointers to Web sites is not intended to assign importance to those sites or the information contained therein, nor is it intended to endorse or recommend any views expressed, or products or services offered on these sites.

Security:

For site security purposes and to ensure that this service remains available to all users, US-CERT webservers employ industry-standard methods to monitor network traffic to identify unauthorized attempts to upload or change information, or otherwise cause damage. Unauthorized attempts to upload information or change information on US-CERT servers are strictly prohibited and may be punishable by law. Visitors to our website have no expectation of privacy when they attempt to access portions of the website that are not open to the public. The only time we will attempt to identify individual users or usage habits is when we are assisting in law enforcement investigations

If you have any questions about these policies, please contact us.