Examples of information security incidents which should be reported include, but are not limited to: 

• Harassing email 
• Phishing or spoofing emails
• Viruses/email hoaxes
• Incidents in the open-area computer labs 
• Loss, theft or damage of a device, media or paper records 
• Malicious software on systems 
• Attempts (failed or successful) to gain unauthorized access to a system or its data 
• Defacement of a university website 

If you suspect that you have been the victim of a phishing attack, it is important that you report the incident to us as soon as possible. 

Spam email can be reported to spam@umanitoba.ca.

How to report an information security incident

To report an information security incident, please contact the IST Service Desk.

NOTE: In certain circumstances, due to the sensitive nature of an incident, people may be concerned about reporting it to the IST Service Desk.  In such cases, you may directly contact the Information Security Team at: infosec@umanitoba.ca

Reporting non-information security incidents

To report a non-information security incident, contact Security Services.

Safeguarding the University of Manitoba's IT resources, technology and data requires a team effort. True information security asks that all our stakeholders including students, staff and faculty make a commitment to being aware of and following our policies, usage agreements and procedures.

Your access and usage privileges to university resources requires that you act responsibly, and legally. It also requires that you respect the integrity of other peoples and university’s systems. These policies and procedures lay out the standards and responsibilities you must follow.

Policies and procedures

• Information Security Policy (PDF)
• Information Security Procedure (PDF)
• Use of Computer Facilities Policy (PDF) 
• Use of Computer Facilities Procedure (PDF)
• Custody and Control of Electronic Devices and Media Policy (PDF)
• Custody and Control of Electronic Devices and Media Procedure (PDF)

Information security standards applicable to all university community members

The following information security standards apply to all university community members. Revisions or additions to these information security standards may be undertaken by Information Security and Compliance under the authority of the chief information officer.

Information security standards which apply to IT support

The following information security standards apply to IT support. Revisions or additions to these information security standards may be undertaken by Information Security and Compliance under the authority of the director of Information Security and Compliance. 

For additional information, visit UM’s access and privacy page.