AMTSO Contact List Usage Instructions
The AMTSO Contact List is intended to facilitate fair and open notification of upcoming tests. The system is maintained by AMTSO to support our Standards project; to be confirmed as compliant with our Standards, each test must show that potential participants were given proper notice, and using the Contact List system is the simplest and clearest way to ensure this requirement is met.
How does it work?
The Contact List is essentially a mailing list, gathering all approved and official points of contact for both testers and security product vendors in one place. AMTSO provides multiple subdivisions of the list, as follows:
email@example.com – this address directs mail to all product vendors registered with the AMTSO Contact List
firstname.lastname@example.org – this address directs mail to all testers registered with the AMTSO Contact List
email@example.com – this address directs mail to everyone registered with the AMTSO Contact List
The recipient address provided to the Contact List should ideally NOT be individual or personal email addresses; instead, we encourage all participants to operate internal mailing groups to direct incoming mail to the most relevant people or teams.
Example: Rather than adding both firstname.lastname@example.org and email@example.com to the Contact List, use something like firstname.lastname@example.org, and add both Steve and Dave (and anyone else who would benefit from AMTSO notifications) to the amtso_cl distribution group within your organization’s mail system.
You should also consider the addresses supplied to the AMTSO Contact List as semi-public – while we try to discourage any open sharing of the addresses included in the list, any list participant may request the contact address for any other participant, and AMTSO cannot guarantee that addresses shared in this way will be kept confidential.
Sending to the list
Rights to send mail to the Contact List addresses are restricted. Permission to send in is granted to any participant in the list – the application form allows up to three addresses per applicant. In addition, all addresses registered to the AMTSO members mailing list are permitted to send to the Contact List addresses. Anyone who is not registered to the list is prohibited from sending mail to the list.
To be part of the AMTSO Contact List system, please provide your details using the application form.
Requesting list entries
Anyone registered to the AMTSO Contact List has the right to request the contact details of any other Contact List user. To request a specific contact, please email email@example.com.