Information Security Incident

An Information Security incident is an event which appears to be a breach of the organisation's Information Security safeguards. It is important to respond calmly and to follow a logical procedure, first to prevent the breach from continuing, if possible, and second, to inform the appropriate person(s) within the organisation; this usually includes the appointed Security Officer.

N.B. Where a member of staff fails to observe Information Security procedures; this is not, of itself, an Information Security incident. However, depending on the risk of the incident, disciplinary and/or improved procedures may be required.