Handle and Report IT Security Incidents

Table of contents

Report a security incident

NOTE: If the incident poses any immediate danger call 911 or (301) 405.3333 to contact law enforcement authorities immediately.


What is an IT security incident?

An IT security incident is attempted or actual:

Examples of IT security incidents include:


Resources for IT professionals

During the first 10 minutes

When a significant incident is discovered you should contain the incident by:

During the first 24 hours

Report all incidents to: soc@umd.edu.

Alert business owners and leadership, advising them to keep all details confidential until further notice. When you report an incident, please provide as much information as possible including:

NOTE: The Division of IT's Security Operation Center will contact the unit and develop a plan for further containment and mitigation.

Tips for handling IT security incidents