A cyber-security incident is any event that compromises the security of UVU's information systems. This can range from a system with malware to unauthorized access of sensitive information.
If you suspect or witness a cyber-security incident, immediately email the security team at security@uvu.edu. You don't have to be certain; when in doubt, report it.
UVU has an Incident Response Team comprised of the IT Security team, the CISO, CIO, the University General Council, Insurance and Risk, Public Relations, and external resources. They will handle all phases of incident response which include the following:
Discovery: Detect and acknowledge the incident.
Containment: Limit the immediate impact.
Investigation: Remove the cause of the incident.
Response: Restore affected systems.
Closure: Improve for the future.
Don't Speak on Behalf of UVU: Unless the Incident Response Team instructs you, do not communicate about the incident.
Don't Investigate on Your Own: Leave the investigation to the experts. Your role is to report.
Quick Response: Timely reporting helps in containing the damage.
Legal Obligations: Proper response ensures we meet all legal requirements.
Clear Communication: This helps in limiting confusion and misinformation.
Report suspicions or incidents immediately to security@uvu.edu.
Do not communicate about the incident or try to resolve it alone.
Trust the Incident Response Team to manage the situation effectively.
For more details or questions, email: security@uvu.edu
