Security Hints & Tips: Cybersecurity Incident reporting

Know How to Respond to Security Incidents

An Information Security Incident is an event in a network or system that threatens the confidentiality, integrity, or availability of information. Recognizing and responding to these incidents promptly is essential to protect our organization.

What Counts as a Security Incident?

Examples of incidents include:

• Theft or burglary
• Natural disasters (e.g., floods, typhoons)
• System crashes or Denial of Service (DoS) attacks
• Unauthorized access, potential breaches or misuse of accounts or system resources
• Virus/malware attacks
• Credential harvesting through phishing or smashing
• Drive-by downloads from phishing links
• Third-party/vendor/partner breaches

MGC CYBER
HEROES

Our incredible users spot hundreds of phishing emails each month using the Phishing Alert Button (PAB). Recently Michell Wegner from the sales team at Manitoulin Transport reported a phishing email that imitated an ACH payment remittance with the goal of harvesting credentials for Gmail. Thanks to Michell’s quick action, our cybersecurity team swung into action and quarantined the malicious email

Michell’s strong security mindset and dedication to our IT procedures were key in alerting our Cybersecurity team to this malicious campaign.

A huge thanks to Michell and all our Cyber Heroes for their steadfast dedication to keeping our business secure!

What Should You Do If You Notice a Security Incident?

• Stay Calm
  • Disconnect your computer from the internet if necessary.
  • Do NOT switch off the computer.
• Report It Immediately
  • Use the problem reporting process via the IT Portal:
  • 👉 https://itportal.io/servicedesk
  • For phishing related incidents – Use the phish alert button (PAB)
  • Call 1-833-716-4357 or use ext. 82256.
• Follow Instructions
  • Wait for classification of the incident. The IT team will provide further guidance as soon as possible.

Reference: ISMS 27001 – 05.26 PROCESS OF REPORTING SECURITY INCIDENTS