Tuesday – Cyber Tip: Effective Incident Reporting

Security incident reporting is simply the process of telling your IT team or security department about any unusual or suspicious activity on your computer or network. This could include things like:
  1. Strange pop-up messages
  2. Unexpected software installations
  3. Unusual slowdowns or crashes
  4. Unauthorized access to your accounts
By reporting these incidents, you help the IT team investigate and fix potential security issues, keeping everyone’s data safe. It is like alerting a lifeguard if you see someone struggling in the water — they can then take action to help.

How can I help?

Here are some tips to assist with knowing what to do when faced with a security incident
  1. Report Quickly: If you see something unusual on your computer or mobile device, tell your IT team right away. The sooner they know, the faster they can respond.
  2. Describe Clearly: When reporting, try to explain what happened in simple terms. Mention what you were doing when the issue occurred and any error messages you saw. Include key details such as:
    • Time of occurrence or detection
    • Affected systems, users, or data
    • Actions taken so far
    • Screenshots of errors, if applicable
  3. Stay Calm: Do not panic. Just report the issue calmly and follow any instructions given by the IT team.
  4. Preserve Evidence: Avoid making any changes to the affected systems or files. Preserve logs, emails, and other relevant evidence for the response team.
  5. Maintain Confidentiality: Ensure the details of the incident are only shared with relevant personnel.
Video: Incident Reporting.