How-to Instructions

Incident Response Protocol

Reports of and response to security incidents are handled by University Information Security in the Office of Information Technology.

Report Security Incidents

Report security incidents, including suspected data breaches, or non-compliance with University of MN Information Security policies to University Information Security ( using a computer not involved in the security incident you are reporting.

If a specific computer, device or server is involved:

  • leave it powered on
  • disconnect from the network
  • wait for instructions from University Information Security on next steps.

Do not use the computer or device.  Attempting to "fix" a compromised system may interfere with our ability to determine the severity of an incident.

What to do?

When you discover a computer or device is offline, contact Technology Help.

Don't just “try another jack" or "have someone else log into WiFi using your computer."