The IT Security Office manages security incidents with a particular focus on protecting university data, assets, and operations by partnering with local IT support in immediate response. This service encompasses incident detection, triage, acquisition, analysis, and reporting.
Services (3)
Cooperative assistance with CUPD investigations that request data as evidence or to otherwise assist in an investigation.
The implementation of a security measure to block a NetID, IP address, or MAC address from accessing the Cornell Network. This is typically in response to detecting malware or an instance of copyright infringement.
The response to a reported or detected security compromise, such as a rejected Duo prompt, or suspicious account activity.