Reporting an Incident

Reporting an Incident

If you need to report a Cyber Security incident, please reference the information below to determine your affiliation, the best contact for remediation, and the initial remediation steps.

Security Incident - A security incident is an event, as determined by Georgia Tech Cyber Security, that violates an applicable law or Institute policy including the violation or imminent threat of violation of computer security policies, acceptable use policies, or standard security practices. An incident could also be established based on the potential for harm to the confidentiality, integrity, or availability of Georgia Tech IT resources.

*Do NOT attempt to investigate or remediate the incident on your own. When notifying the appropriate representative(s), please attempt to provide as much information as possible including those items outlined in the Initial Remediation Steps.


Reporting Responsibilities by Affiliation

If a Georgia Tech IT Resource user suspects or has observed an event that would satisfy the definition of a security incident, they should report the suspicion immediately to the system administrator or unit technical lead. 

  • Students - If you are a current Georgia Tech student, you should contact the Technology Support Center (TSC). If you live on-campus, you may also contact Wreck Techs for help.
  • Faculty & Staff - If you are a Georgia Tech faculty or staff member, you should first try to contact your department's Computer Support Representative (CSR). If your CSR is unavailable, you should contact the Security Operations Center (SOC) at 404.385.CYBR (2927) or soc@gatech.edu.
  • CSRs and other IT Professionals - If you are a CSR or other IT Professional, you should reference the GT Security Incident Response Plan.
  • Not affiliated - If you are not affiliated with Georgia Tech, please contact the Security Operations Center (SOC) at 404.385.CYBR (2927) or soc@gatech.edu.

Abuse

If you suspect that your network, systems, or services may have been negatively impacted by resources at Georgia Tech, please report them to the Georgia Tech Cyber Security via email to: abuse@gatech.edu.


Criminal Activity

If you believe a security incident is an illegal act or life threatening, contact the Georgia Tech Police Department: (404) 894-2500, or Emergency: 911 immediately.

If the event falls under the jurisdiction of law enforcement, Georgia Tech reserves the right to direct the reporter to the Georgia Tech Police Department or appropriate law enforcement agencies.