In the case of information security incidentのソースを表示

[[Information Technology Team]] > [[In the case of information security incident]]

{| class="wikitable"
| [[情報セキュリティインシデントが発生したときは|日本語]]
|}

__TOC__

== What is information security incident ==

An information security incident is a security threat to the use of computers.

== Events to be reported ==

* Loss of PC, USB memory, etc.
* Infection by malware.
** Opening of a suspicious email attachment
** Clicking on a suspicious URL link
* Unauthorized access to the server

== What to do when an incident occurs ==

* Initial actions
** Contacting your organization's administrator ([http://jimubu.adm.s.u-tokyo.ac.jp/inside/index.php/%E3%83%8D%E3%83%83%E3%83%88%E3%83%AF%E3%83%BC%E3%82%AF%E6%8B%85%E5%BD%93%E8%80%85%E4%B8%80%E8%A6%A7 Network administrators] (Japanese) (internal access only))
** Contacting department contact section below
** Disconnect PCs from the network to preserve evidence.
* Subsequent actions
** Cooperation in the analysis of the incident.
** Cooperation in the report to UTokyo-CERT and headquarters

== Department contact section ==

* General affairs
** ext.: 24005
** mail: [mailto:shomu.s@gs.mail.u-tokyo.ac.jp shomu.s@gs.mail.u-tokyo.ac.jp]
* Information technology team
** ext.: 23022
** mail: [mailto:joho.s@gs.mail.u-tokyo.ac.jp joho.s@gs.mail.u-tokyo.ac.jp]


[[Category:Information Technology Team]]