The Virtual Security Incident Response Team, or VSIRT, is a specially-formed team of individuals from across the University that responds to serious information security incidents. The UISO designates VSIRT members with the appropriate skills to identify, assess, respond to and communicate the effects of serious incidents. The proposed UA Incident Response Plan establishes a procedure for responding to serious incidents. Under the proposed Incident Response Standard, VSIRT has the following roles and responsibilities in connection with serious incidents:
- Attempt to contact the affected user of information resources or local IT support provider
- Communicate to the user and the local IT support provider any actions that need to be taken by them, the reasons for them, the steps required to re-establish service and any relevant technical information
- Take necessary and appropriate actions to mitigate or remediate the incident
- Initiate escalation procedures to the appropriate office or party as needed
- Maintain documentation of the serious incident
