Report Security Incident

University Workforce must report the following to OU IT Security immediately: 

1. any event in which access to University data might have been gained by an unauthorized person 
2. any event in which a device containing University information has (or might have been) lost, stolen or infected with malicious software

3. any event in which an account belonging to a person that has access to the data might have been compromised or the password shared with unauthorized person (responding to phishing emails, someone shoulder surfing, and writing down your password, etc.) 
4. any attempt to physically enter or break into a secure area where University data is or might be stored 
5. any other event in which University data has been or might have been lost or stolen 
6. any event in which University information system policies, standards, or practices are violate

Additional Information

Next Steps for Individuals

• First, DO NOT TURN OFF OR UNPLUG POWER TO THE COMPUTER.
• Second, unplug the network cable from the back of the computer and turn off any wireless internet connection.
• Following the report, follow any additional directions provided by IT Support staff or IT Security to repair the system, restore service, and preserve evidence of the incident.