Page Comparison

Purpose

If you don’t report a security incident as soon as it is identified, you will delay receiving the help required to reduce the impact to your work and prevent loss of data.

Audience

On this page

Initial considerations

Consult your incident response plan.

• Your divisional or departmental incident response plan should information you of (1) the incident response process and (2) how to escalate incidents to their academic, administrative, or technical leadership teams.

  • Incident response planning

Determine the severity of the security incident.

• https://security.utoronto.ca/framework/standards/incident-security-response-plan/severity-ratings-of-incidents/  

High

• “Significant fines, penalties, regulatory action, civil or criminal violations could result from disclosure. It could also cause significant harm to Institutional Information, major impairment to the Location’s overall operation, or the impairment of essential service(s).”

Medium

• “Unauthorized use, access, disclosure, acquisition, modification, loss, or deletion could: (a) result in moderate damage to U of T, its students, employees, community or reputation; (b) result in moderate financial loss; or (c) require legal action.”

Low

• “Unauthorized use, access, disclosure, acquisition, modification, loss or deletion could result in minor damage, small financial loss or affect the privacy of an individual or small group.”

What can I do?

For medium or high severity incidents.

• Contact security.response@utoronto.ca immediately.

For low severity incidents or if you are unsure of the severity.

• Contact your local IT group for assistance.

  • https://uoft-infosec-cf.atlassian.nethandbook.security.utoronto.ca/wiki/spaces/ISH/pages/4948958/Contact+us#Information-Technology-(IT)