Security incident reporting

Security Incident Reporting

• Phishing - known cases

Reporting an incident is not considered a complaint, but a willingness to cooperate to improve the quality of ICT services. We are very grateful for your efforts to help maintain the operational reliability and security of ICT services for MENDELU students and staff. Cyber attacks are handled in a coordinated and professional manner. Successful defence against cyber-attacks is primarily composed of disciplined behaviour by users and operators of MENDELU ICT services. We see a lot from a security infrastructure perspective, but we are keen to learn what security concerns and threats.

Before reporting phishing, please check the link above (Phishing - Known cases) to see if the incident has already been reported.

Reporting is recommended in the form of a report in HelpDesku or contact support.

The notification must state:

• the time period
• a brief description of the symptoms of the incidents
• if necessary, documented by a copy of the screen, e.g. by taking a picture of the screen using a mobile phone

A security incident is considered to be, for example:

• misuse of identity (username)
• misuse of a MENDELU mail account
• disruption of MENDELU IT services (printers, computers, data communications)
• unauthorised access to information and data or its leakage to third parties
• destruction of data by deleting it or making it inaccessible (encryption)
• installation or distribution of unauthorised or unauthorised software on MENDELU resources
• unauthorised data collection activities on the behaviour of MENDELU ICT components, functions and services

MENDELU is the administrator and operator of a major information system (MIS) according to § 3 (e) of the ZOKB. The University Information System (UIS) has been identified as an important information system (VIS). In accordance with § 8 (6) of the Cybersecurity Act (ZoKB), the administrator and operator is obliged to report without delay all cyber incidents that occur in the system to the Office (NÚKIB). This obligation is fulfilled by MENDELU in a uniform manner, through your partial reports in the HelpDesk. The Manager KB submits the official report via the designated form to the Authority. Therefore, to report your problem, always contact the university's HelpDesk.