Incident Reporting & Security Culture

1. Why Reporting Matters

Early reporting helps prevent small issues from becoming major security incidents. The faster a potential threat is identified, the easier it is to contain.

Reporting something suspicious protects not just you, but the entire organization.

2. What Should You Report?

  • Suspicious emails asking for urgent actions or passwords
  • Unexpected login alerts or system behavior
  • Accidental clicks on suspicious links
  • Sending sensitive information to the wrong recipient
  • Lost or stolen devices
  • Unusual pop-ups, system slowdowns, or unknown software

If something feels unusual, it is better to report it.

3. No-Blame Reporting Culture

Security is a shared responsibility. You will never be penalized for reporting a suspected issue.

We would rather investigate a false alarm than miss a real threat.

4. Report Early, Report Fast

  • Do not try to fix security issues yourself
  • Do not ignore warning messages
  • Report incidents immediately to the IT/Security team
  • Provide as much detail as possible when reporting

Quick reporting helps reduce potential damage.

5. Build a Security-First Mindset

  • Pause before clicking unknown links
  • Verify unusual requests
  • Encourage team members to follow secure practices
  • Stay alert to new and evolving threats

A strong security culture starts with awareness and shared responsibility.

Incident Reporting Checklist

  • Report suspicious emails immediately
  • Inform IT if you clicked something accidentally
  • Notify security about lost or stolen devices
  • Escalate unusual system behavior
  • When unsure, report first

Reporting early helps protect everyone. Security starts with you.