If you're unsure if it's an incident, report it!

Most security folks (and IT folks, for that matter) would rather hear about a problem from you than to figure it out afterwards while troubleshooting a system failure. If a phone call from someone claiming to be the Service Desk doesn't sound quite right, if a common email announcement is just a little off, or if a caller on the phone is too stressed to remember his or her password — don't be pressured and don't be rushed. Rush and pressure are among the "social engineering" hacker's best tools. Ask for help! Call your supervisor, call the Service Desk at (360)753-2454, or simply report the potential incident. You are as responsible (or more) to the whole agency as you are to the one person on the phone! Don't let one person's stress jeopardize information security.

Security tips are brought to you by the CTS SOC. The mission of the CTS SOC is to provide centralized information sharing, monitoring, and analysis of Washington State security posture. Contact us at: soc@cts.wa.gov.