[University home]

IT Services

Reporting IT Security Incidents

If your system suffers from a security incident (unauthorised access, possibly resulting in system or data files being unlawfully read or modified) contact our Computer Emergency Response Team (MAN-CERT).You can also telephone us on extension 56004.

Please do the same if you notice suspicious activity on your computer.

Do not delay informing us because you are unsure of the perpetrator's identity, or because a disciplinary action against the offender may be pending. The primary role of the CERT team in this case is 'damage limitation' and helping with evidence gathering.

We will inform the other site about the attack and either ask them for help in investigating the intrusion from their end, or alert them to possible damage done to your system. At this stage we (or the other site) are not interested in the offender's identity, all we want to do is to limit, and repair, any damage done.

The identity of your system will not be revealed to sites not directly involved in the incident.