Step

Responsible Party

Action

1.

Workforce members

Workforce members should immediately report any privacy or information security incident to their manager/supervisor, if available.

If the manager/supervisor is not available, workforce members should proceed to steps 2 & 3 of this procedure and report the incident to their manager/supervisor in a timely manner.

See the Information Security Office Incident Response Web page for examples of privacy or security incidents.

2.

Manager/supervisor

Gather privacy/information security incident information:

1. Reporting individual’s:
• Name
• Agency/Cluster
• Position
• Address, City
• Email Address
• Phone Number
2. Incident Information:
• Date
• Time
• Location
3. Description/Action:
• Brief description of the incident, parties and/or information systems involved and any action taken.

3.

Manager/supervisor

Submit report. Reports must be submitted to the OIS Customer Service and Support Office (Help desk) or the Information Security Office. The report may be made verbally or electronically, printed or by fax.