Cybersecurity Incident Reporting
Cybersecurity incidents must be reported to the Indiana Office of Technology (IOT). If the incident involves a release to the environment or poses a reasonable threat to human health, the IDEM Emergency Response must also be contacted. It is also recommended that incidents be reported to federal authorities to support broader cybersecurity awareness and response efforts.
Notify State Authorities
- Indiana Office of Technology (IOT)
Report the incident through the IOT Cybersecurity Incident Reporting process.
Required for all cyber incidents:- Within 24 hours after discovery if there are operational impacts
- Within two business days for all other incidents
- Indiana Department of Environmental Management (IDEM)
Contact Emergency Response at:
(888) 233-7745 or (317) 233-7745 (available 24 hours/7 days)
Required for an incident that:- Results in sewage or chemical release into the environment; or
- Poses a reasonable threat to human health or the environment
Notify Federal Authorities (Recommended)
- Cybersecurity and Infrastructure Security Agency (CISA) Cyber incidents and anomalous activity can be reported 24/7 via:
https://www.cisa.gov/report
report@cisa.gov or 1-844-Say-CISA (1-844-729-2472)