b. Archive evidence and documentation.
8. Identify post-incident activities needed
Determine lessons learned and make recommendations to prevent subsequent similar incidents
Close out the incident
If it has been determined that an information security incident has occurred and restricted or confidential data/information has not been impacted, the CIO under the guidance of Legal Counsel will determine steps to communicate, contain, eradicate, remediate, document and as well determine any post-incident activities.
KSU will adhere to federal, state laws, rules, regulations, policies and procedures governing the confidentiality of data and notification of security breaches.
REFERENCES AND RELATED MATERIALS:
Appendix A: Security Incident Reporting Form
Date Submitted:___/___/___
1. Reported By Contact Information
Full Name:
Job Title:
Department/College:
Office Room Number:
Work Phone Number:
Cellphone Number:
Email Address:
Additional Contact Information:
2. Type of Incident (Check all that apply)
2. Type of Incident (Check all that apply)
☐ Compromised/Stolen/Altered Data ☐ Theft and use of Others ID's ☐ Denial of Service ☐ Unauthorized Access ☐ Data Breach ☐ Social Engineering (e.g. Phishing, scams) ☐ Website Defacement or Redirection ☐ Reconnaissance (e.g. scans, probes) ☐ Malicious Code (e.g. worms, virus, Trojan) ☐ Computing Device Lost, Stolen or Damaged ☐ Violation of Security Policy or Policies ☐ Other or Unknown (Provide description below)