How can you let the right person or group know about something related to technology at ¶¶Òõ̽̽ that might put personal information at risk, that seems contrary to policy or law, or that raises ethical concerns? Here are suggested ways of reporting some common concerns, including information security incident reports.
Computer or information technology security incident or breach
A security or data breach is any incident in which sensitive or confidential data are exposed or are at risk of exposure to unauthorized persons. High risk personal non-public information is of greatest concern.
Normal business use by employees or University business partners does not constitute a computer security breach.
Examples:
- Loss or theft of a computer
- Loss or theft of a portable device such as a phone, a hard drive, a USB drive, or removable media
- Theft of sensitive or confidential data
- Release or publication of sensitive or confidential data, whether intentional or accidental
- An unauthorized person having unsupervised access to a University employee's computer
- An unauthorized person gaining direct or indirect control of a University computer
- To report: Call (toll-free) 866-236-5752 or email iso@uvm.edu
- More info: Data Breach Notification Policy (PDF)
Phishing and other attempts to steal ¶¶Òõ̽̽ credentials (Network-IDs, passwords) or ¶¶Òõ̽̽ information
Body
- To report: Forward the email as an attachment to abuse@uvm.edu
- More info: Look for alerts posted on the The Phishbowl
Scams, phishing, and spam not involving ¶¶Òõ̽̽ credentials or information
Body
- To report: Forward email as an attachment to is-spam@uvm.edu and consider submitting to .
Abuse, violations of law or ¶¶Òõ̽̽ IT policies
Body
- To report: Email abuse@uvm.edu
- More info: IT Policies
Unethical use of technology
Body
Examples include:
- Unauthorized manipulation or deletion of sensitive data or non-sensitive data
- Data privacy and integrity
- HIPAA violations
- Inappropriate use of technology
- Intellectual property infringement
- To report: Ethics and Compliance Reporting HelpLine
Privacy concerns
Body
- To report: See the Procedures section of ¶¶Òõ̽̽'s Privacy policy (PDF)
Copyright and other Digital Millennium Copyright Act (DMCA) infringements
Body
To report alleged copyright infringements on University of Vermont websites:
- Email copyright@uvm.edu
- Phone 802-656-2006 (Information Security Office)
None of the above? Not sure whether or how to report something?
Body
- To report: Call (toll-free) 866-236-5752 or email iso@uvm.edu
- More info: Information Security Office