Report IT Security Incident

Overview

A security incident is any event resulting in unauthorized access, loss, disclosure, modification, disruption, or destruction of information resources—whether accidental or deliberate. Technology Services helps evaluate and respond to these incidents to ensure appropriate handling and resolution.

Getting Started

To report a current or suspected security incident, email security@tamu.edu or fill out the report form. In the case of an IT emergency, call Help Desk Central at 979.845.8300 and request the on-call Security Team contact.

Learn more about the kinds of incidents you should report.

Request

To meet reporting obligations under Security Control IR-6, submit after-action incident reports to security@tamu.edu.

Service Details

Texas A&M Technology Services provides support for incident response through evaluation, containment, and recovery processes. Security experts assist with identifying scope, preventing further compromise, and coordinating appropriate communications and remediation efforts.

Features

• Incident evaluation and containment support
• Remediation guidance and recovery planning
• Compliance with university and state security controls
• Access to expert advice and documentation for incident handling

Guidelines

• Follow all applicable TAMU security policies and state TAC 202 regulations
• Submit after-action reports as required by IR-6 controls
• Use secure methods of communication when reporting sensitive data breaches

Data Restrictions

Sensitive data involved in incidents should be handled securely. Use encryption or phone communication to avoid additional exposure.

Resources

• Security Control IR-6, Incident Reporting
• SANS Incident Handler's Guidebook (opens in new window)