Guidelines for Reporting a Security Incident

Timeliness: Report security incidents as soon as possible. The quicker the incident is reported, the faster it can be investigated and mitigated. If you are unsure whether an event qualifies as a security incident, report it anyway to allow the appropriate team to evaluate the situation.

Accuracy: Provide accurate and complete details about the incident. Inaccurate or incomplete information can delay the response process. Avoid making assumptions; describe what you have observed directly.

Confidentiality: Do not share sensitive information about the incident outside the necessary channels. Keep the report confidential. Follow the confidentiality guidelines outlined in the security policy.

Detail: Include all available details about the incident, such as time, location, and nature of the event. Any information can be valuable in helping investigators understand and mitigate the incident.

No Retaliation: Reporting security incidents in good faith will not lead to retaliation. Security teams rely on reports to protect systems, and all reports are treated confidentially.

Follow-up: Be available for follow-up communication. The investigation team may need additional information or clarification after you report the incident.