Sharing Incident Information

Once a report of a security incident is received by a member of the Information Security department, that member sends an email describing the incident, along with his/her response to the department mailing list. All further correspondence between the department member and person that reported the incident is also carbon copied to the IS mailing list so that in case this member is unavailable for a later emergency dealing with this case, the other department members are familiar with it. This also helps in the event that this particular security incident happens again, the entire security department is then familiar with how it was remedied the previous time.

By reporting computer security incidents to security@gatech.edu, Information Security can better track security incidents, track Georgia Tech's security posture and generate campus network security reports.

Receiving incident reports also helps information security better guage the general direction that new attack technologies are moving, thus allowing IS to derive more effective methods of protecting campus computing resources.