If you observe a cybercrime or IT security incident, who should you notify and what should you do?

• A. Notify the IT department or campus security immediately and submit a formal incident report.
• B. Do nothing; it will resolve itself.
• C. Only inform your classmates
• D. Post the incident on a public board

Answer: (A)

When someone sees a cybercrime or IT security incident, the first step is to notify the right people and document what happened. This is about following the incident response process: quick escalation to the IT department or campus security so they can contain the issue, assess scope, and start an investigation. They have the authority and tools to isolate affected systems, preserve evidence, and coordinate with any necessary parties. Submitting a formal incident report captures essential details—what occurred, when, which systems or data were affected, and any suspicious activity—so responders know exactly what to investigate and how to respond.

Delaying or handling it informally can allow the problem to get worse, put others at risk, and make it harder to trace what happened or recover data. Telling classmates or posting publicly also bypasses proper channels, could violate privacy and policy, and may leak information that could cause further harm.

In short, promptly reaching out to the IT department or campus security and filing a formal incident report ensures the incident is handled safely, consistently, and with an auditable record for containment, investigation, and remediation.