Security incident report
Instructions
Incident category and type
This section includes five primary categories of security incidents. Please select the category that best fits the incident you wish to report.
Incident details
Provide comprehensive details about the incident to help the Corporate Security Directorate (CSD) to better understand the situation. Include as much information as possible when completing the Security Incident Report (SIR).
If an employees' identification, access credentials, laptops, cellphones, or other departmental assets have been lost or stolen, specify the highest classification level of the information these assets may contain (Protected, Secret, or Top Secret). This will assist CSD in assessing the potential impact of the incident.
Should you need help completing the Security Incident Report, contact your Branch Region Security Officer (BRSO) or the Security Incident Unit by e-mail at spac.dgsenquetessecurite-dobsecurityinvestigation.pspc@tpsgc-pwgsc.gc.ca.
For more information on the departmental security incident program, visit the identify and report security incidents page on My Source.
This form is not reporting a suspicious or phishing email attempt. These occurrences should be reported to the cyber security team by clicking on the Report Phishing button at the top right of your Microsoft Outlook screen.
Privacy notice
The personal information is collected pursuant to the Privacy Act and in accordance with the Policy on Government Security and the PSPC Policy on Departmental Security. The personal information will be used by the Departmental Oversight Branch to report and investigate security incidents, ensure that vulnerabilities are identified, and mitigate the risk of future occurrences of the same nature. The personal information is described in the TBS Personal Information Bank (PIB) Security Incidents and Privacy Breaches PSU 939.
Your personal information is protected, used, and disclosed in accordance with the Privacy Act. Under the Privacy Act, you have the right to access and correct your personal information, if erroneous or incomplete.
If you require clarification about this privacy notice, you may contact the Public Services and Procurement Canada’s Access to Information and Privacy Directorate by email at TPSGC.ViePrivee-Privacy.PWGSC@tpsgc-pwgsc.gc.ca. If you are not satisfied with the response to your privacy concern or if you want to file a complaint about the handling of your personal information, you may wish to contact the Office of the Privacy Commissioner of Canada.