Steps to follow
Report anything that causes concern
Immediately contact the UCSF Service Desk to report an information security problem or a possible or potential information security problem.
Timely reporting will allow us to limit any further damage or loss of data and determine if further investigation is necessary. Be ready to provide your contact information and other specifics, such as the date and time of the incident and the type(s) of device(s) involved.
Also report any specific information you believe indicates that a computer security incident occurred or that a device was breached, lost or stolen.
Reporting a lost or stolen computing device
All lost or stolen computing devices must be immediately reported to the UCSF Police Department at 415-476-1414 or http://police.ucsf.edu.
Incident information guidelines
Effective incident response is essential in mitigating damage and loss from an information security incident. Proper handling minimizes disruption to workflow and ensures compliance with federal, state and University laws, rules, regulations and policies.
This document satisfies the requirement in BFB IS-3, Information Security for Incident Response Procedures.
An outline of the requirements for information security incident investigations at UCSF is in Addendum C of policy 650 -16. Also see UCSF's Incident Investigation Procedures, an attachment to Addendum C.