With the digitization of services, and increase in technological convenience all around us, cybersecurity is more prevelant than ever.
With the pervasiveness of information technology (IT) and cyber networks systems in nearly every aspect of society, effectively securing the Nation's critical infrastructure requires investments in network resiliency as well as cyber infrastructure protection. As all levels of government now rely on cyber networks and assets to provide national security, public safety, and economic prosperity, their operations depend on information systems that are maintained, protected, and secured from exploitation and attack. The San Diego Office of Emergency Services works to support preparedness for the Department of IT and potential incidents the region may experience.
Actions residents can take to protect themselves from cyber threats:
- Use strong passwords and two-factor authentication.
- Watch for suspicious activity.
- Check your e-mail, financial, and social account statements regularly.
- Ensure your home network is secure, and use secure internet connections when connecting to services outside of your home.
- Keep software up to date and use antivirus solutions to block threats.
- Use encryption with your files, when sending personal information through emails, or other means of digital communication.
- Regularly back up your files.
- Limit the amount of personal information you share online.
- Immediately contact banks, credit cards companies, and other financial institutions to report breaches.
General Incident Reporting Guidance
Cybersecurity reporting laws and requirements are constantly changing; this is meant to be a guide for incident reporting, and legal advice should be sought for incident response.
- Local Government Response
- Agency Cyber incidents that have large cascading effects that result in imminent danger to life or property (e.g. chemical releases, damage to critical infrastructure) should be reported to local authorities by calling 9-1-1.
- State of California
- Any breach that involves personal information must be reported to the affected California residents. Data breaches that affect 500 or more Californians must also be reported to the California Attorney General https://oag.ca.gov/ecrime/databreach/reporting.
- Department of Justice – FBI Internet Crime Complaint Center (IC3)
- Cybercrime, including computer intrusions or attacks, password trafficking, fraud, violation of federal statutes, intellectual property theft, identity theft, theft of trade secrets, child pornography, criminal hacking, terrorist activity, espionage, sabotage, or other foreign intelligence activity: https://www.ic3.gov/complaint.
- Department of Homeland Security: National U.S. Computer Emergency Readiness Team (US-CERT)
- Suspected or confirmed cyber incidents that may impact critical infrastructure and require technical response and mitigation assistance: https://www.cisa.gov/uscert.
For additional guidance, resources, and general City-related information, visit the Department of IT's Security webpage here.