• b. Archive evidence and documentation.

8. Identify post-incident activities needed

  • Determine lessons learned and make recommendations to prevent subsequent similar incidents
  • Close out the incident
  • If it has been determined that an information security incident has occurred and restricted or confidential data/information has not been impacted, the CIO under the guidance of Legal Counsel will determine steps to communicate, contain, eradicate, remediate, document and as well determine any post-incident activities.

KSU will adhere to federal, state laws, rules, regulations, policies and procedures governing the confidentiality of data and notification of security breaches.

REFERENCES AND RELATED MATERIALS:

Appendix A: Security Incident Reporting Form

Date Submitted:___/___/___

1. Reported By Contact Information
Full Name:
Job Title:
Department/College:
Office Room Number:
Work Phone Number:
Cellphone Number:
Email Address:
Additional Contact Information:

2. Type of Incident (Check all that apply)

2. Type of Incident (Check all that apply)

☐ Compromised/Stolen/Altered Data ☐ Theft and use of Others ID's ☐ Denial of Service ☐ Unauthorized Access ☐ Data Breach ☐ Social Engineering (e.g. Phishing, scams) ☐ Website Defacement or Redirection ☐ Reconnaissance (e.g. scans, probes) ☐ Malicious Code (e.g. worms, virus, Trojan) ☐ Computing Device Lost, Stolen or Damaged ☐ Violation of Security Policy or Policies ☐ Other or Unknown (Provide description below)