Regulation

1. Constitution and Admission

This Internal Regulations and Code of Conduct establish the principles, operational standards, and ethical rules of the CHAOS Team, a competitive and educational cybersecurity team associated with Núcleo de Estudantes de Informática (NEI-ISEP).

The purpose of this team is to engage students in an area that remains largely unexplored academically, fostering a community where the sharing of knowledge is worth more than any victory.

By joining the team, each member commits to contributing to a healthy, inclusive, and collaborative environment, representing NEI-ISEP, ISEP (implicitly), and the academic community with professionalism, ethics, and responsibility, both in academic settings and in external competitions.

2. Context and Objectives

The CHAOS Team is composed of current and former students of ISEP, while also welcoming other motivated individuals who demonstrate availability and alignment with the team’s values.

During the initial phase, recruitment is open continuously, with the aim of building a dynamic, motivated, and collaborative team. At this stage, there are no technical exclusion criteria; admission is primarily based on motivation, curiosity, commitment, and willingness to learn.

The team seeks to maintain a balance between experienced members and less experienced members, ensuring knowledge is shared continuously and in an organized manner. The number of active members should fall within the maximum reference range of 20 to 25, in accordance with the limits of major international competitions, with this number reviewed at the end of each academic year.

As the team evolves, technical tryouts may be implemented, along with a structure organized by experience level, allowing for a more efficient organization adapted to the team’s growth.

3. Leadership Structure

3.1. Leadership and Coordination

The team is led by a Captain, who is responsible for strategic coordination, operational management, and institutional representation of CHAOS. Initially, the Captain role is assigned directly. Subsequently, this position will be determined based on performance, seniority, availability, and team management skills.
The Captain remains in office as long as they demonstrate full availability and the capacity to fulfil their responsibilities. Should the Captain be unable to perform their duties, succession will be decided by the coaches and the team through an election process based on trust, merit, and leadership ability.

3.2. Team Development and Organization

Technical and educational support will often be provided by faculty, professors, and invited specialists, with the long-term expectation of having two to three coaches.

Initially, there will be no formal internal departments; the organization is based on collaboration among members. As the team grows, internal structures dedicated to specific areas may be created. Additionally, there is a long-term ambition to develop a Bug Bounty team, a goal dependent on the technical skills of the members, which is not feasible during the initial stage.

3.3. Conflict Resolution

Internal conflicts should be resolved through dialogue, mature communication, and mutual respect. In the event of an impasse, decisions will be made by the coaches and the captain. In extreme situations, resolutions may be reached through democratic agreement of the entire team. The captain remains in office as long as they have the availability and capacity to fulfil their duties; if unable to do so, the coaches and the team will elect a successor.

4. Training and Development

Training constitutes a central pillar of CHAOS. Regular practice sessions, internal workshops, technical sessions, and continuous development activities will be promoted, ideally with support from ISEP. Participation in these activities is strongly encouraged, especially among less experienced members.

The team follows a collaborative learning model, in which experienced members play an active role in training and mentoring less experienced members, fostering a supportive environment for knowledge sharing.

CHAOS is positioned as an ego-free learning environment, where mistakes are regarded as a natural part of growth. The objective is not merely to win, but to learn, evolve, and build a solid, engaged, and dynamic community.

Members who wish to focus solely on learning, and who are not yet confident in competing, may join the team without competitive obligations. However, members possessing sufficient technical skills will be encouraged to participate in competitions as part of their development.

5. Competitions

The CHAOS team will participate in both national and international competitions, initially focusing on online formats. In-person competitions will be considered once the team reaches enough members, which may involve the formation of sub-teams.

Participation in free-access CTFs is open to all available members. For paid competitions, selection will be conducted through internal tryouts.

The management of the competitive calendar will strictly respect the members’ academic schedules, avoiding participation during examination periods or project submission weekends.

Following an initial integration phase, members are expected to participate as their availability permits. In a more established stage, a minimum participation rate of 40% in the team’s CTFs is expected. These participation levels will be considered during semi-annual evaluations and the team’s global annual review.

After each competition, technical write-ups will be produced to serve as internal study tools for continuous training and the analysis of approaches, methodologies, and errors. These documents are intended exclusively for the team’s collective development and technical training; they shall not be used as instruments for individual assessment or as mechanisms for personal performance analysis.

6. Code of Conduct and Ethics

All CHAOS members shall act in accordance with the principles of integrity, responsibility, mutual respect, and professional ethics, worthily representing the team, NEI-ISEP, and ISEP (implicitly). Members are encouraged to experiment and develop practical cybersecurity competencies and real-world skills, always within controlled, secure, and ethical environments.

Respect for colleagues and the team spirit is fundamental. Stealing flags, cheating in competitions, or engaging in behaviours that may damage the reputation of the team or the institution is strictly prohibited. While CHAOS promotes hands-on learning and technical creativity, all acquired knowledge must be used responsibly and ethically, avoiding any actions outside the context of training, research, CTFs, or ethical investigation.

The team adheres to the principles of ethical hacking, social responsibility, and legality. Serious violations of these principles, or actions that compromise the team’s integrity, will be reviewed by the coaches and the captain. Such actions may lead to corrective measures or the member’s expulsion, ensuring always a space for dialogue and clarification. This ethical commitment ensures that CHAOS remains a safe, educational, and trustworthy environment for all.

7. Evaluation and Evolution

The team will be monitored through semi-annual evaluations and a global annual review to track technical evolution, participation levels, and collective development. All members are expected to engage actively in the team’s activities and contribute to the community.

Cases of prolonged inactivity, inappropriate behaviour, or actions that compromise the team’s core principles will be reviewed by the coaches and the captain. Such situations will always be addressed through dialogue, providing the member with an opportunity for clarification; however, in extreme cases, these may lead to corrective measures or expulsion.

CHAOS promotes continuous growth, technical excellence, and the strengthening of the community, aiming to establish itself as an academic and educational reference in the field of cybersecurity.