Reporting Cyber Security Incidents Policy

Describes the process for reporting information security incidents and events.

Date	Version Number	Change Description	Referenced Section
2/10/05	1.0	New Document	Entire Document
10/6/14	2.0	Major Revisions
12/13/18	2.2	Minor Revisions
2/1/22	2.3	Minor Revisions	Owner Name
10/2/25	3.0	Major Revisions	1.0, 2.0, 3.0, 4.0, 5.0, 6.0, 7.0, 9.0

 Review Process / Approval

Action:	Units	Date
Policy Review	Information Technology Services Management Services
Policy Approval	Office of Information Technology	2/10/05

All users of college-provided technology services including, but not limited to, faculty, staff, volunteers, students, and employees of the Research Foundation, College Auxiliary Services, and other permitted third-party organizations.

Cybersecurity Event:

• An observable occurrence within a system.
• Can be benign, like a user logging in or a firewall allowing a packet.
• Can be suspicious, like a user attempting to log in outside of allowed hours.
• Can be malicious, like a virus scan finding malware.
• A broad term encompassing all types of occurrences.
• Examples: user login, server restart, firewall activity, malware scan results.

Cybersecurity Incident:

• A cybersecurity event with a negative impact on the organization.
• Breaches security policies, compromises confidentiality, integrity, or availability (CIA).
• Requires immediate attention and response.
• Examples: data breach, malware infection, ransomware attack, denial of service.

Summarizes the roles and responsibilities of all individuals involved with the implementation of this policy.

The SUNY Plattsburgh Cyber Security Incident Response Plan is protected information but can be made available on request if needed for business purposes. Please contact the director of Information Technology Services to be granted access.

Related Policies

• SUNY Plattsburgh Policy #10019.2 – Responsible Use of Technology Resources Policy
• SUNY Information Security Policy 6900

Method	Date
Campus Handbook	N/A
Faculty / Staff Digest	11/7/25
Student Digest	N/A
Other	N/A

There are no specific trainings identified with this policy.