IT security incident - What to do?
What do I do as an end user in an IT emergency?
Step by step
- stay calm, do not take any ill-considered measures
- disconnect device from WiFi/network (pull network cable)
- record what is happening (photo, video, etc.)
- leave everything as it is. Also do not remove unpleasant files!
- do NOT turn off or disconnect device from power:
→ Important tracking data could be lost- Only switch off with current backup
(pull cable, press on on button for a long time)
- Only switch off with current backup
- briefly note own assessment of incident and amount of damage
- report incident by using the report form on the right and inform possible affected parties
Note:
- Do not pass on any information to third parties
- Under no circumstances pay extortion money
- Do not try to fix the problem yourself
Relevant Documents
Reporting an Information Security Incident:
Word: Incident Report.docx
OpenOffice: Incident Report.odt
PDF: Incident Report.pdf
Reporting a loss of data media:
PDF: Supplementary questions for reporting a loss of data media.pdf
Further Information
Check out our new F.A.Q. and learn more about IT security!