Report an Incident

What do I do and what is the process?

System User

  • Reports abnormal event to IT Help Desk at 915-215-4111, option 1 or ELP.HelpDesk@ttuhsc.edu

IT Helpdesk Personnel

  • Receives report from system user and notifies Information Security Office.

Critical Incident Response Team (CIRT)(First Responder)

  • Validates abnormal event as an incident or not
  • If event is determined to be an incident, reports to the Information Security Officer.

Information Security Officer

  • Determines level of incident as either small, medium, or large.
  • Assigns CIRT lead if incident is classified as medium or higher.
  • Activates incident response plan.
  • Notifies the Chief Information Officer/Information Resources Manager when incident is classified medium or higher.

CIRT Team

  • Implements remaining phases to handle incident as defined in the incident response plan.
  • Tracks and documents the incident per the incident response plan.
  • Reports incident resolution to the Information Security Officer.

Information Security Officer

  • Validates abnormal event as an incident.
  • Reports incident resolution to the Chief Information Officer/Information Resources Manager, other executive-level management, and the Department of Information Resources.