The EGI CSIRT met in person for the first time in 2025 at CERN. Discussions focused on operational tasks such as monitoring, vulnerability management, etc., incident response, and the objectives for 2025. The focus will be on raising awareness of security through guidelines and training. Our security policies will be reviewed and updated. One day of the meeting was dedicated to tokens, how to track their use for services and job submission, how to revoke them in case of misuse, and how to use and implement them in a secure way.