Title:	Incident Response, Information Technology
Policy Owner:	Information Security Office
Applies to:	Students, Employees, Users
Campus Applicability:	All Campuses, Except UConn Health
Effective Date:	May 16, 2012
For More Information, Contact	Chief Information Security Officer
Contact Information:	(860) 486-8255
Official Website:	http://security.uconn.edu/

This policy is available in the Information Security Policy Manual.

The Information Security Office (ISO) will establish, document, and distribute an Incident Response Plan to ensure timely and effective handling of security incidents involving information technology (IT) resources.

University employees with IT responsibilities are responsible for understanding and following the University’s Incident Response Plan.

Suspected and confirmed security incidents, their resolution steps, and their outcomes shall be documented by those directly involved. The ISO will ensure that incidents are appropriately logged and archived.

Procedures

All employees must immediately report lost or stolen technology resources to the University Police Department (860-486-4800), the Information Security Office (860-486-8255), and the University’s Office of the Controller (860-486-2937).

Policy Created: May 16, 2012

---