Every second counts: Correct behavior in the event of an IT security incident  [12.10.23]

If your workstation is affected by an IT security incident, every second counts! Details about the incident are secondary, what counts here is the speed to act quickly and appropriately to minimize potential damage!

The following 5-point plan should help you to act appropriately in case of an incident:

1. Disconnect the affected computer from the network:
   Unplug the network cable or disable the wireless connection to prevent the incident from spreading further.
2. Inform your supervisor, the IT officer or the IT service desk, and the Information Security staff unit:
   Report the incident immediately - the quicker information is provided, the quicker appropriate action can be taken.
3. Document the incident:
   Note all information about the incident, including when it occurred, the nature of the incident, the software and/or data affected, and any suspicious activity or messages from the system.
4. Disconnect the computer from power:
   If the incident is serious, it may be advisable to turn off the computer to prevent further damage. If possible, try to save as much information and evidence as possible beforehand.
5. Keep calm:
   Avoid taking unauthorized actions that could potentially worsen the incident.

IT security incidents require a rapid and coordinated response to minimize the impact and prevent future incidents. If you have any questions, please contact the Information Security staff unit.

Back to All news