Reporting an Information Security Incident
What is a Security Incident?
-
Any real, suspected, or potential event that compromises, threatens to compromise, or violates Dartmouth College’s information security policies, practices, or acceptable use guidelines
-
The incident can disrupt the confidentiality, integrity, or availability of data and information systems that support the operations and mission of the College
-
Incidents include, but are not limited to, the following occurences:
- Unauthorized Access - Any access to College data, information systems, or physical locations containing sensistive information that violates established security policies or procedures
- Data Breach or Disclosure - The exposure, theft, or data loss, whether unintentional or deliberate
- System Compromise -The successful exploitation of College systems or networks
What to Do
If you suspect a data incident has occurred please complete the following steps immediately:
- Stop all work
- Do NOT share suspected data incident information electronically, verbally, by phone, email, or in any other way
Contact InfoSec
Two options for reporting an incident to InfoSec:
- Submit a support ticket: https://dartgo.org/report-incident
- Email information.security -at- dartmouth.edu
For more information on how to report an incident: https://dartgo.org/incident-form-template
Non-Incident Related Questions
via Campus Slack
-
slack should only be used for non-incident inquiries
-
unless instructed otherwise, please limit Slack communications to the general security channel for your team
via Email
- email any non-incident-related security questions to information.security -at- dartmouth.edu