Incident Reporting Procedures
The WSU IT Security Office is responsible for assisting in responding to IT security related incidents. A security related incident may include unauthorized access to your computer and/or the misuse of Washington State University IT resources, including the unauthorized acquisition, disclosure, or modification of University data.
The IT Security Office is charged with investigating incidents where University confidential or personal data may have been compromised. See Executive Policy #8, University Data Policies for definitions of the University data classifications; Public, Non-Public, and Confidential. All security incidents (or suspected incidents) involving a computer containing University confidential or personal information must be reported immediately to the IT Security Office.
The IT Security Office will coordinate with other university units and law enforcement as appropriate.
In the event that one of your computer systems has been compromised, please follow the appropriate incident reporting procedure below:
Emergency Reporting Procedures
- For all incidents involving criminal activity, threats to personal safety or physical property, contact the WSU Police Department at 509-335-8548 or dial 911.
- For IT security related incidents requiring immediate attention, including security breaches of University confidential or personal information, contact the IT Security Office and follow these Incident Response Procedures.
General Reporting Procedures
- If you notice suspicious computing activity, please contact your local systems administrator to rule out any local computer or network problems.
- If you do not have a local support person, please contact the
ITS Help Desk at 509-335-HELP. - For non-emergency reports of computer security or abuse incidents, send email to abuse@wsu.edu. Details such as logs, IP number, domain name, date/time will be helpful.
Abusive Email
Send abusive or harassing email to abuse@wsu.edu. Please be aware that no legitimate company, including banking institutions, would ask you to verify your account information electronically. As these are known frauds, it is not necessary to report these kinds of emails.
Spam
Unfortunately, the high number of spam emails received makes it impossible for us to investigate these incidents. Unless the spam contains criminal content, we do not need to be informed of spam that is not filtered properly by the Barracuda spam appliance. Additional information is available at Barracuda Spam Filtering and Blocking.