14. Any actual or suspected loss, theft, or improper use of or access to, Harvard confidential information or systems must be reported

Any actual or suspected loss, theft, or improper use of or access to, Harvard confidential information or Harvard systems must be reported as soon as possible to a local School Security Officer or a University Information Security Officer.

See also: Policy

Reporting Lost Device

D6: Any actual or suspected loss, theft, or improper use of a device storing confidential information must be reported promptly.

Reporting breaches

SB10: Server and application operators must promptly inform the appropriate escalation contacts of any possible breaches, whether the system is managed directly by Harvard or via contract with a third-party service provider for Harvard's use (e.g. IaaS, SaaS).