Report an Incident
What do I do and what is the process?
System User
- Reports abnormal event to IT Help Desk at 915-215-4111, option 1 or ELP.HelpDesk@ttuhsc.edu
IT Helpdesk Personnel
- Receives report from system user and notifies IT CyberSecurity Office.
Critical Incident Response Team (CIRT)(First Responder)
- Validates abnormal event as an incident or not
- If event is determined to be an incident, reports to the IT CyberSecurity Officer.
IT CyberSecurity Officer
- Determines level of incident as either small, medium, or large.
- Assigns CIRT lead if incident is classified as medium or higher.
- Activates incident response plan.
- Notifies the Chief Information Officer/Information Resources Manager when incident is classified medium or higher.
CIRT Team
- Implements remaining phases to handle incident as defined in the incident response plan.
- Tracks and documents the incident per the incident response plan.
- Reports incident resolution to the IT CyberSecurity Officer.
IT CyberSecurity Officer
- Validates abnormal event as an incident.
- Reports incident resolution to the Chief Information Officer/Information Resources Manager, other executive-level management, and the Department of Information Resources.