 |
|
Incident Response
Incident Examples
A Privacy or Information Security incident may occur in one or more of the
following situations:
- Confidential or protected Health Information is accidentally or intentionally
disclosed to unauthorized persons
- An unauthorized person asks for or is given access to DHS systems
- Unauthorized reproduction of confidential or protected information
- Unauthorized persons found in confidential area
- Confidential or protected documents are not disposed of properly when
no longer needed.
- Theft of documents containing confidential or protected information.
- Confidential or protected information is not protected as it should be
or is mishandled in some manner
- Confidential or protected information is falsified
- Computer equipment (laptop, personal digital assistants (PDAs), desktop
workstation) containing confidential or protected information is stolen.
- Employees share logins and/or passwords
- Someone asks for someone elses password
- Data is defaced or destroyed
- Data is modified for unexplained reasons
- A workstation or notebook computer is found with a virus
- Equipment misuse or tampering
- Any violation of DHS security or privacy policies
|
|
