Incident Reporting

The DHS Information Security Office (ISO) is responsible for receiving and reviewing privacy and information security incidents and coordinating responses to those incidents with DHS program representatives.

• How to Report an Incident
• Incident Examples
• Frequently Asked Questions (FAQ's)
• Incident Response Policy
• Download the Privacy Incident Report form (DHS 3001)

If you have detected an information security or privacy problem we'd like to know about it.

Step 1 -- Alert your supervisor to the problem immediately. If the incident involves your supervisor, you may report the incident directly to the Information Security Office--see Step 3. 

Note: If the incident involves the theft or loss of a DHS computer, laptop, or BlackBerry device:

• Report loss to the OIS Service Desk: (503) 945-5623.
  They will deactivate the device and any affected accounts to limit the exposure to DHS information.
• For thefts only, also notify your local law enforcement agency.

Step 2 -- Gather as much detail about the incident as possible: date, time, location, type of information or system, contact information. Download the Privacy Incident Report form DHS-3001 to assist in gathering incident information. Completing the form is optional.

Step 3 -- Report the incident to the DHS Information Security Office (ISO) via phone, email, fax, or in-person.

Phone 503-945-5780 or email dhs.privacyhelp@state.or.us. The complete list of ISO Contacts is on our website.