IT/Cybersecurity Incident Reports
NOTE: THIS CONTENT IS NOT UP TO DATE.
Click HERE to access the updated content on Sunny.
Embedded Files
IT and Cybersecurity Incidents can also result in a Privacy Incident and/or HIPAA Breach. A virus, intentional hack, ransomware, or other bad-actor system intrusion could ultimately result in unauthorized access to client PHI and should be reported immediately.
IT and Cybersecurity Incidents can also result in a Privacy Incident and/or HIPAA Breach. A virus, intentional hack, ransomware, or other bad-actor system intrusion could ultimately result in unauthorized access to client PHI and should be reported immediately.
What types of incident need to be reported?
What types of incident need to be reported?
An IT/Cybersecurity Incident is any of the following:
any act or attempt to gain unauthorized access to, disrupt or misuse an Information System or Computer;
an event resulting in unauthorized access to or the disruption or misuse of an information system or information stored on an information system;
any event that violates Thriveworks Policy; Information Security Policy; other policy, standard, or code of conduct; or threatens the confidentiality, integrity, or availability of Information Systems.
Examples of these types of events include:
strange login activity on your Gmail, AMD, or other Thriveworks accounts;
emails or texts from third parties requesting money for access to accounts or systems;
irregular pop-ups or activity on your computer by a third party; and
any other strange or irregular account or computer activity.
What do I do if an incident has occurred?
What do I do if an incident has occurred?
If an IT or Cybersecurity incident has occurred the first step is for you to reach out to our wonderful IT team by filling out a Help Ticket on Fresh Service. While the IT Team offers support on a number of IT issues, for all IT/Cybersecurity incidents please select "Information Security" as the appropriate category--this will ensure your request is escalated so it can be addressed as soon as possible.
If any client PHI has been released, accessed, or affected as a result of the IT/Cybersecurity Incident, please be sure to complete our Privacy Incident Ticket as well, linked below. Additional guidance on when a Privacy Incident Report is needed can be found on this Knowledgebase as well.
What happens after I fill out the Ticket?
What happens after I fill out the Ticket?
Once a Help Ticket is placed, a member of out IT Team will reach out and determine appropriate next steps to contain the issue, prevent any further data from being transmitted, and/or mitigate the situation. After the issue has been appropriately addressed and remediated, you may be contacted again by a member of our IT or Legal team to determine the cause of the issue for our internal reports.
Link to additional IT/Cybersecurity incident information
Link to additional IT/Cybersecurity incident information
Additional Information on reporting IT/Cybersecurity Incidents can be found in the attached document below or by using this link.
To place a Fresh Service Help Ticket click here.
IT Incident Report.pdfPage updated
Report abuse