Security Incident Procedures Policy

SUNY Plattsburgh has implemented a documented process for promptly identifying security incidents. The process is based on the SUNY Cyber Security Incident reporting procedure and the local reporting process will include the following:

• Any unusual or serious cyber security incident will be reported immediately by an employee to their direct supervisor.
• If the cyber security incident meets the threshold of reporting, the direct supervisor will consult with SUNY Plattsburgh’s Information Security Officer; the initial alert procedure will be followed.
• • SUNY Plattsburgh’s Information Security Officer will alert the Provost, President, Emergency Management Director and Public Relations, if appropriate. 
  • The NYS CSCIC Incident Notification Report: Initial Report and Final Report will be filed in a timely manner.