Security :: Incident Response

Printer-friendly version

California law requires individual notification where the security of personally-identifiable or other confidential information has been compromised.

If you suspect that a computer or system for which you are responsible has been compromised:

  • Do not unplug, turn off, disconnect, or otherwise touch the computer in any way UNLESS you strongly suspect that Level 1 protected data is in the process of being removed from the system as a result of the security breach and that your actions would prevent this.
  • Contact your supervisor and your ITC immediately.

If the system contains Level 1 or Level 2 data, this is an information security emergency. Telephone the Campus Information Security Office (ISO) at (707) 826-3815 immediately, or ask your supervisor to send an email to

Make no public statements about the incident. All questions must be referred to the ISO during any investigation. After the investigation, specific referral directions will be issued by the ISO.

For after-hours emergencies, please email or call UPD at (707) 826-5555.

Additional information:

IT Staff Procedure to Secure Compromised Systems

HSU Incident Response and Notification Plan (requires HSU login)