IT Se­cur­ity In­cid­ent - What to do?

What should I do in an IT emergency?

Step by step

  1. Stay calm and don't take any rash measures.
  2. Do not turn off or unplug the device.
    → Important tracking data could be lost.
  3. Disconnect the device from the WLAN and network (unplug the network cable).
  4. Record events if necessary (photo, video, etc.).
  5. Leave everything as it is.
  6. Briefly note your own assessment of the incident and the amount of damage.
  7. Report the incident using the report form and obtain an assessment from the incident team.

Please note

  • Do not share any information with third parties
  • Never pay extortion money.
  • Do not attempt to fix the problem yourself.

Phish­ing At­tack: What to do?

The "BSI-ProPK-Checklist-Phishing" page from the German Federal Office for Information Security (BSI) provides a thorough checklist for safeguarding against phishing attacks.

Phishing Checklist

More Info:

Check out our new FAQ to learn more about IT security!

FAQ

Relevant documents

Additional questions regarding data carrier loss reporting:

Attachment: Data carrier loss report

pdf | 107 KB

Download

Reporting an Information Security Incident:

Incident report in Word format

docx | 435 KB

Download

Incident report in PDF format

pdf | 156 KB

Download

Further information:

Signed Emails Notes on Phishing Emails Data Protection Unit Information Security Incident Information Security Team Technical and Organisational Measures (TOMs) Documents & Downloads