Avoid financial penalties and limit damage
It is important that you respond as soon as you discover that something has happened, such as an IT security incident or personal data breach. You are required to report incidents if information or operations that are important to Sweden’s security have been subject to espionage, sabotage, terrorism and other crimes that could threaten the organisation. This is known as a security protection incident.
By acting quickly, you can receive assistance in limiting the damage and the University can report incidents with a notification obligation in a timely manner. To avoid financial penalties, the University is required to report incidents to the Swedish Civil Contingencies Agency within six hours. The reporting requirement for reports to the Swedish Authority for Privacy Protection is within 72 hours.
Report an IT security incident
If you suspect that your user account (UMU ID), computer, mobile phone or email has been compromised or infected with a virus or similar, it is important that you report this as soon as possible. This will allow you to receive help responding to your situation, but it will also enable review and improvement of existing IT and information protection. Umeå University is required to report serious IT security incidents to the Swedish Civil Contingencies Agency (MSB) within six hours.
Read more about IT security incidents on Aktum (UMU ID required)
Report a personal data breach
A personal data breach is a security incident involving personal data. For example, personal data may have been destroyed or changed, lost or fallen into the wrong hands, or a mobile phone may have been stolen.
Submit notification of this as soon as possible. Umeå University must report the breach to the Swedish Authority for Privacy Protection within 72 hours from the point when the person reporting the incident was made aware of it.
Read more about personal data breaches on Aktum (UMU ID required)
Report a security protection incident
If something occurs involving classified information, security sensitive activities or employees who have security clearance, your head of department, head of office or equivalent should immediately contact the security team.
Read more about security protection and security protection incidents on Aktum (UMU ID required)
