Incident Reporting
The Information Security and Privacy Office (ISPO) is responsible for receiving and reviewing privacy and information security incidents and coordinating responses to those incidents with DHS/OHA program representatives.
Reporting a privacy or security incident
If you have detected an information security or privacy problem we'd like to know about it.
Step 1 -- Alert your supervisor to the problem immediately. If the incident involves your supervisor, you may report the incident directly to the Information Security Office--see Step 3.
Note: If the incident involves the theft or loss of a DHS/OHA computer, laptop, or BlackBerry device:
- Report loss to the OIS Service Desk: (503) 945-5623.
They will deactivate the device and any affected accounts to limit the exposure to DHS/OHA information.
- For thefts only, also notify your local law enforcement agency.
Step 2 -- Gather as much detail about the incident as possible: date, time, location, type of information or system, contact information. Download the Privacy Incident Report form DHS-3001 to assist in gathering incident information. Completing the form is optional.
Step 3 -- Report the incident to the Information Security ande Privacy Office (ISPO) via phone, email, fax, or in-person.
Phone 503-945-5780 or email dhs.privacyhelp@state.or.us. The complete list of ISPO Contacts is on our website.