{"id":15286,"date":"2019-08-26T14:00:18","date_gmt":"2019-08-26T18:00:18","guid":{"rendered":"https:\/\/michigan.it.umich.edu\/news\/?p=15286"},"modified":"2024-07-08T06:05:20","modified_gmt":"2024-07-08T10:05:20","slug":"ia-coordinates-response-to-all-it-security-incidents","status":"publish","type":"post","link":"https:\/\/michigan.it.umich.edu\/news\/2019\/08\/26\/ia-coordinates-response-to-all-it-security-incidents\/","title":{"rendered":"IA coordinates response to all IT security incidents"},"content":{"rendered":"\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"700\" height=\"525\" src=\"https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2019\/08\/IR-Team-photo-IMG_8143-700x525.jpg\" alt=\"\" class=\"wp-image-15287\" srcset=\"https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2019\/08\/IR-Team-photo-IMG_8143-700x525.jpg 700w, https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2019\/08\/IR-Team-photo-IMG_8143-187x140.jpg 187w, https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2019\/08\/IR-Team-photo-IMG_8143-267x200.jpg 267w, https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2019\/08\/IR-Team-photo-IMG_8143-768x576.jpg 768w, https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2019\/08\/IR-Team-photo-IMG_8143-665x499.jpg 665w\" sizes=\"auto, (max-width: 700px) 100vw, 700px\" \/><figcaption>Kevin Cheek (left) and Will Rhee of the ITS Information Assurance Incident Response team in their forensics lab.<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">We all know to call 911 for emergency assistance or to report a crime, but what if you suspect an IT security incident is in progress? Report it to ITS Information Assurance (IA) as soon as possible: <\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Report all serious or potentially serious IT security incidents to <a rel=\"noreferrer noopener\" aria-label=\"security@umich.edu (opens in a new tab)\" href=\"mailto:security@umich.edu\" target=\"_blank\">security@umich.edu<\/a>.<\/li><li>Report non-serious IT security incidents to the <a rel=\"noreferrer noopener\" aria-label=\"ITS Service Center (opens in a new tab)\" href=\"https:\/\/its.umich.edu\/help\" target=\"_blank\">ITS Service Center<\/a>.<\/li><li>In some U-M units, reports go to the Security Unit Liaison (SUL) or local IT group.<\/li><li>Not sure? Send email to <a rel=\"noreferrer noopener\" href=\"mailto:security@umich.edu\" target=\"_blank\">security@umich.edu<\/a>.<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">IA coordinates response\u2014and communication<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">IA has primary responsibility for coordinating the response to serious IT security incidents. Once you&#8217;ve reported an incident, you can expect IA to keep you involved while coordinating. SULs and IT staff who receive reports of suspected IT security incidents should work with IA. IA will involve other U-M offices, such as the Office of General Counsel, as needed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">IA also coordinates all incident-related communication. This helps provide the greatest transparency possible while not jeopardizing any related criminal investigation or causing undue alarm. IA staff will help you ensure U-M leadership and others receive appropriate updates, only releasing information on a need-to-know basis.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">See <a rel=\"noreferrer noopener\" aria-label=\"IT Security Incident Management Guidelines for U-M Units (opens in a new tab)\" href=\"https:\/\/safecomputing.umich.edu\/it-security-incident-management-guidelines-u-m-units\/\" target=\"_blank\">IT Security Incident Management Guidelines for U-M Units<\/a> (U-M login required) for details.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">If in doubt, ask<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">IA staff are always ready to help you. IT security incidents can happen at any time, so IA monitors the security@umich.edu mailbox outside normal business hours.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Learn more about IT security incidents on Safe Computing:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><a rel=\"noreferrer noopener\" aria-label=\"Responding to an IT Security Incident (opens in a new tab)\" href=\"https:\/\/safecomputing.umich.edu\/report-it-security-incident\/responding-it-security-incident\" target=\"_blank\">Responding to an IT Security Incident<\/a><\/li><li><a href=\"https:\/\/safecomputing.umich.edu\/report-it-security-incident\/roles-and-responsibilities\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\"Incident Response Roles and Responsibilities (opens in a new tab)\">Incident Response Roles and Responsibilities<\/a><\/li><\/ul>\n","protected":false},"excerpt":{"rendered":"<p>IA has primary responsibility for coordinating the response to serious IT security incidents. Report all serious or potentially serious IT security incidents to security@umich.edu. Once you&#8217;ve reported an incident, you can expect IA to keep you involved while coordinating.<\/p>\n","protected":false},"author":49,"featured_media":15287,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_uag_custom_page_level_css":"","_umich_oidc_access":"","_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_ef_editorial_meta_date_first-draft-date":"","_ef_editorial_meta_paragraph_assignment":"","_ef_editorial_meta_checkbox_needs-photo":"","_ef_editorial_meta_number_word-count":"","footnotes":""},"categories":[27],"tags":[488,23],"class_list":["post-15286","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-safe-computing","tag-cybersecurity","tag-security"],"uagb_featured_image_src":{"full":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2019\/08\/IR-Team-photo-IMG_8143.jpg",4032,3024,false],"thumbnail":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2019\/08\/IR-Team-photo-IMG_8143-187x140.jpg",187,140,true],"medium":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2019\/08\/IR-Team-photo-IMG_8143-267x200.jpg",267,200,true],"medium_large":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2019\/08\/IR-Team-photo-IMG_8143-768x576.jpg",665,499,true],"large":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2019\/08\/IR-Team-photo-IMG_8143-700x525.jpg",600,450,true],"1536x1536":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2019\/08\/IR-Team-photo-IMG_8143.jpg",1536,1152,false],"2048x2048":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2019\/08\/IR-Team-photo-IMG_8143.jpg",2048,1536,false],"excerpt-thumbnail":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2019\/08\/IR-Team-photo-IMG_8143-200x140.jpg",200,140,true],"themonic-thumbnail":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2019\/08\/IR-Team-photo-IMG_8143-60x42.jpg",60,42,true],"ioslider-thumbnail":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2019\/08\/IR-Team-photo-IMG_8143-658x300.jpg",658,300,true],"post-thumbnail":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2019\/08\/IR-Team-photo-IMG_8143-665x499.jpg",665,499,true],"400x250-crop":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2019\/08\/IR-Team-photo-IMG_8143.jpg",333,250,false]},"uagb_author_info":{"display_name":"Matt Ranville, ITS Privacy Office","author_link":"https:\/\/michigan.it.umich.edu\/news\/author\/mrr\/"},"uagb_comment_info":0,"uagb_excerpt":"IA has primary responsibility for coordinating the response to serious IT security incidents. Report all serious or potentially serious IT security incidents to security@umich.edu. Once you've reported an incident, you can expect IA to keep you involved while coordinating.","_links":{"self":[{"href":"https:\/\/michigan.it.umich.edu\/news\/wp-json\/wp\/v2\/posts\/15286","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/michigan.it.umich.edu\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/michigan.it.umich.edu\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/michigan.it.umich.edu\/news\/wp-json\/wp\/v2\/users\/49"}],"replies":[{"embeddable":true,"href":"https:\/\/michigan.it.umich.edu\/news\/wp-json\/wp\/v2\/comments?post=15286"}],"version-history":[{"count":2,"href":"https:\/\/michigan.it.umich.edu\/news\/wp-json\/wp\/v2\/posts\/15286\/revisions"}],"predecessor-version":[{"id":15290,"href":"https:\/\/michigan.it.umich.edu\/news\/wp-json\/wp\/v2\/posts\/15286\/revisions\/15290"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/michigan.it.umich.edu\/news\/wp-json\/wp\/v2\/media\/15287"}],"wp:attachment":[{"href":"https:\/\/michigan.it.umich.edu\/news\/wp-json\/wp\/v2\/media?parent=15286"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/michigan.it.umich.edu\/news\/wp-json\/wp\/v2\/categories?post=15286"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/michigan.it.umich.edu\/news\/wp-json\/wp\/v2\/tags?post=15286"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}