Reporting Cyber Security Incidents

The Information Technology Security Policy requires all State employees and contractors to report suspected security situations. The sooner an issue is reported the sooner it can be evaluated, which increases the chances of minimizing any potential impact.

So what kinds of things should you report?
  • Suspected security violations or incidents.
  • If you suspect a security safeguard has failed.
  • Physical or electronic intrusions.
  • Lost or stolen State technology equipment (laptops, phones, etc.).
  • Spam
There are three types of spam emails that BIT would like reported.
  1. Any email that’s asking for you to enter your User ID and password to reset or verify your email account or webmail account.
  2. Any email asking you to open an attachment that you’re unsure of.
  3. Spam with one or more links.
Who should you report it to?

If it’s spam, forward the email to ReportSpam@state.sd.us. For all other issues, report to the BIT Help Desk by phone 605.773.4357 or email. When in doubt, err on the side of caution and report the issue immediately!