Report a Cybersecurity Incident

A quick response is critical to protecting our campus data and network. If you suspect an
unauthorized person has gained access to a system or if you notice suspicious activity,
IMMEDIATELY report it using one of the methods below.
DO NOT attempt to fix the issue yourself, share login information, or open suspicious
attachments.
1. Primary Reporting Method (Recommended)
The fastest way to report a potential incident is by sending an email to our dedicated security
inbox. This creates a secure and trackable record of your report.
Email: cybersecurity@jsums.edu
What to Include in Your Report:
When you report, please provide as much of the following information as possible:

1. Your Full Name and Contact Information (phone/email).
2. Date and Time the incident occurred or was noticed.
3. A detailed description of what happened (e.g., "I clicked a link in a strange email," "My
computer started showing pop-ups," or "I received an error message").
4. Any specific error messages you saw (copy/paste the text if possible).
5. Location (which computer or system was affected).
2. Contact by Phone
If you cannot access your email or believe the incident requires immediate verbal
communication, please call the appropriate number:
 For Staff Support: 601-979-6400
 For Student Support: 601-979-0245

What Qualifies as an Incident?
If you are unsure whether something is an incident, report it anyway. It's always better to be
safe. Examples of things to report include:
 Suspicious Emails (Staff, Faculty and Students): Receiving a phishing or scam
email, especially if you clicked a link or entered your password.
 Malware/Viruses (JSU Devices): Your computer is running slowly, crashing, showing
pop-ups, or freezing unexpectedly.
 Lost/Stolen Equipment: Any missing university-owned device (laptop, tablet, phone,
flash drive).
 Unauthorized Access (Staff, Faculty, and Student): Noticing files or accounts that
you did not create or open.

How the Process Works
Once we receive your report, the Director of Information Security/CISO and the Computer
Security Incident Response Team (CSIRT) will:
1. Acknowledge Receipt and confirm the details with you.
2. Contain and Analyze the incident to limit damage.
3. Remediate the issue to restore normal operations.
4. Contact you to confirm resolution and address any follow-up questions.