Advice

What to do in case of an information security incident?

Information systems differ from one another and so do attacks against them. If you suspect that you have become a target of a security incident attempt, follow this:

• Keep calm.
• Contact the ICT support in your organisation or the service provider, the CERT-FI group, or the Police in case of a crime.
• Make a copy of the log files, such as the firewall log file.
• If possible, write down the processes currently running on your computer.
• Try to find out whether any data has been lost or changed.
• Try to disclose the vulnerabilities in your system.
• Make the necessary corrections.
• Contact the organisation the attack originates from.
• Contact the organisation to which the attack may have been forwarded.
  

Please contact the CERT-FI organisation e.g. in the following cases:

• attacks or attempts of attack against the Internet infrastructure, such as name services and the backbone

• automated and widely-spread attacks or attempts of attack aimed at websites

• serious attacks and attempts of attack aimed at the telecommunications network

• disclosure of new attack types and attempts of use

• security incidents or attempts of them aimed at the information systems of private persons, firms, organisations or public administration.

CERT-FI is at your service in information security matters. In addition to general knowledge of information security, technical help is provided.

CERT-FI has also published informative articles in Finnish.

Page updated 09.08.2007

Print version