Guidelines for Internal Reporting of Information Security Breaches

Washington and Lee University Office of General Counsel Answer Center Information Security Guidelines for Internal Reporting of Information Security Breaches
General Counsel

Important Contact Information:

  • Public Safety Office: 540-458-8999
  • Information Security Officer: Dean Tallman, Director Enterprise Applications and ITS Security, 458-8089, dtallman@wlu.edu

Washington and Lee University’s Information Security Program Committee oversees the university’s handling of confidential information. For more information on the policies that relate to information security at W&L, see the Information Security Program. These procedures are a reference for any faculty or staff employee who suspects that a breach of confidential university information has occurred.

The Bottom Line: Contact one of the above-listed individuals as soon as possible after you suspect a breach or become aware that an electronic device has been lost or stolen.

Frequently Asked Questions

Think of the term “breach” in fairly broad terms. A “breach” includes any situation that does or likely could involve the unauthorized release, disclosure, loss, or theft of confidential information, whether known or suspected, accidental or intentional.

Report any known or suspected breach of printed information to the University’s Information Security Program Coordinator (contact information above).

Report any known or suspected breach of electronic information or loss/theft of an electronic device (e.g., university-owned cell phone, computer, jump-drive) to the University’s Information Security Officer (contact information above).

Report all physical thefts to Public Safety, to the Information Security Program Coordinator, and, if applicable, to the Information Security Program Coordinator and/or the Information Security Officer as noted above.

Depending on the nature of the actual or suspected breach, the person you contact will usually request more information from you about the circumstances surrounding the breach. If necessary, the University’s Information Security Program (ISP) Committee will be notified and may meet to recommend a course of action to the Provost.

General Counsel