How to recognize and report information security incidents

UNH Information Security Services is responsible to respond to and investigate incidents involving USNH or UNH Information Technology resources, including suspected data breaches, compromised user accounts or devices and lost or stolen computers. 

For incident reports requiring immediate attention:

  • Monday - Friday, 7:30 AM to 5:00 PM, call the UNH IT Service Desk at 603-862-4242  

  • Outside of university business hours, call UNH Police Dispatch at 603-862-1427

  • When calling either the UNH IT Service Desk or UNH Police Dispatcher about a time-sensitive incident, please ask the Service Desk Staff or Dispatcher to alert the UNH Information Security Officer.

Security Review for Computer Incidents Service

 

Incident Reports

State of New Hampshire Reporting Requirement

Definitions for Reporting Requirement

The State of New Hampshire maintains specific statutes that require certain notifications to take place following an information technology security breach.

NIST Computer Security Incident Handling Guide

Computer security incidents are serious and stressful events. While no two cases are identical, the steps to follow in handling an incident should be based on a set of standard principles and practices, guided by checklists, and should be repeatable. The National Institute of Standards and Technology (NIST) Computer Security Incident Handling Guide provides comprehensive guidance for preparing for, and responding to computer security incidents. The Guide provides checklists to follow, and suggests personnel and teams that should be involved in responding to information security incidents.

ISS has developed the Technology Incident Investigation Form as a guide for investigating and reporting incidents.