Reporting an Incident

IMPORTANT NOTE: If you believe a security incident is an illegal act or life threatening, contact the Georgia Tech Police Department: (404) 894-2500, or Emergency: 911 immediately.
Reporting an Incident

If you need to report a Cyber Security incident, please reference the information below to determine your affiliation, the best contact for remediation, and the initial remediation steps.

Security Incident - A security incident is an event, as determined by Georgia Tech Cyber Security, that violates an applicable law or Institute policy including the violation or imminent threat of violation of computer security policies, acceptable use policies, or standard security practices. An incident could also be established based on the potential for harm to the confidentiality, integrity, or availability of Georgia Tech IT resources.

*Do NOT attempt to investigate or remediate the incident on your own. When notifying the appropriate representative(s), please attempt to provide as much information as possible including those items outlined in the Initial Remediation Steps.


Reporting Responsibilities by Affiliation

If a Georgia Tech IT Resource user suspects or has observed an event that would satisfy the definition of a security incident, they should report the suspicion immediately to the Security Operations Center (SOC).

GT Security Operations Center
404-385-2927
soc@gatech.edu

Abuse

If you suspect that your network, systems, or services may have been negatively impacted by resources at Georgia Tech, please report them to the Georgia Tech Cyber Security via email to: abuse@gatech.edu.