Report a computer or network vulnerability to the 

U.S. Computer Emergency Readiness Team

Incident Hotline: 1-888-282-0870 or www.US-CERT.gov

For more cyber tips, best practices, "how-to" guidance, and 

to sign up for technical and non-technical cyber alerts visit

www.US-CERT.gov 

Protect YourWorkplace

Guidance on Physical and Cyber

Security and Reporting of 

Suspicious Behavior, Activity, 

and Cyber Incidents

HomelandSecurity

a combination 

percase and 

ry 45 to 90 days).

passwords, or 

s to anyone.

from strangers.

al software or 

ork or hardware 

rtment. 

s or copies of 

lems with your 

ed defense 

nizational, and 

es for employee 

 technologies.

alls, intrusion 

ent filtering.

patches" for all 

asswords on all 

and attempted 

rks.

SYSTEM FAILURE OR DISRUPTION

Has your system or website’s availability been disrupted?Are your employees, customers, suppliers, or partnersunable to access your system or website? Has your service been denied to its users?

SUSPICIOUS QUESTIONING

Are you aware of anyone attempting to gain informationin person, by phone, mail, e-mail, etc., regarding theconfiguration and/or cyber security posture of yourwebsite, network, software, or hardware?

UNAUTHORIZED ACCESS

Are you aware of anyone attempting (either failed or successful) to gain unauthorized access to your systemor its data? 

UNAUTHORIZED CHANGES OR ADDITIONS

Has anyone made unauthorized changes or additions to your system's hardware, firmware, or software characteristics without your IT department’s knowledge,instruction, or consent?

SUSPICIOUS E-MAILS

Are you aware of anyone in your organization receivingsuspicious e-mails that include unsolicited attachmentsand/or requests for sensitive personal or organizationalinformation?

UNAUTHORIZED USE

Are unauthorized parties using your system for the processing or storage of data? Are former employees, customers, suppliers, or partners still using your system?

ity

Report Suspicious

Cyber Incidents

Download this brochure at www.US-CERT.gov

DHS/PD/OIP/RMD/Feb06/v1.0
our workplace: 

s, and 

onnel.

als to identify 

kplace.

ocks to your 

ersonnel as 

 and critical 

zation’s keys, 

 vehicles.

y in or near your

cks, parking 

ty.

to your local 

contain 

nformation that 

al equipment, 

uch as wallets, 

n use.

rity

port a suspicious 

your workplace.

_____

ncy. 

Albany (518) 465-7551Albuquerque (505) 889-1300Anchorage (907) 276-4441Atlanta (404) 679-9000Baltimore (410) 265-8088Birmingham (205) 326-6166Boston (617) 742-5533Buffalo (716) 856-7800Charlotte (704) 377-9200Chicago (312) 431-1333Cincinnati (513) 421-4310Cleveland (216) 522-1400Columbia (803) 551-4200Dallas (972) 559-5000Denver (303) 629-7171Detroit (313) 965-2323El Paso (915) 832-5000Honolulu (808) 566-4300Houston (713) 693-5000Indianapolis (317) 639-3301Jackson (601) 948-5000Jacksonville (904) 721-1211Kansas City (816) 512-8200Knoxville (865) 544-0751Las Vegas (702) 385-1281Little Rock (501) 221-9100Los Angeles (310) 477-6565Louisville (502) 583-3941

Memphis (901) 747-4300Miami (305) 944-9101Milwaukee (414) 276-4684Minneapolis (612) 376-3200Mobile (251) 438-3674Newark (973) 792-3000New Haven (203) 777-6311New Orleans (504) 816-3000New York City (212) 384-1000Norfolk (757) 455-0100Oklahoma City (405) 290-7770Omaha (402) 493-8688Philadelphia (215) 418-4000Phoenix (602) 279-5511 Pittsburgh (412) 432-4000Portland (503) 224-4181Richmond (804) 261-1044Sacramento (916) 481-9110Salt Lake City (801) 579-1400San Antonio (210) 225-6741San Diego (858) 565-1255San Francisco (415) 553-7400San Juan (787) 754-6000Seattle (206) 622-0460Springfield, IL (217) 522-9675St. Louis (314) 231-4324Tampa (813) 253-1000Washington, DC (202) 278-2000

SURVEILLANCE

Are you aware of anyone recording or monitoring activities, taking notes, using cameras, maps, binoculars, etc., near a key facility?

DEPLOYING ASSETS

Have you observed abandoned vehicles, stockpiling ofsuspicious materials, or persons being deployed near akey facility?

SUSPICIOUS PERSONS

Are you aware of anyone who does not appear tobelong in the workplace, neighborhood, businessestablishment, or near a key facility?

SUSPICIOUS QUESTIONING

Are you aware of anyone attempting to gain informationin person, by phone, mail, e-mail, etc., regarding a keyfacility or its personnel?

TESTS OF SECURITY

Are you aware of any attempts to penetrate or testphysical security or procedures at a key facility?

ACQUIRING SUPPLIES

Are you aware of anyone attempting to improperlyacquire explosives, weapons, ammunitions, dangerouschemicals, uniforms, badges, flight manuals, accesscards, or identification for a key facility or to legallyobtain items under suspicious circumstances thatcould be used in a terrorist act?

DRY RUNS

Have you observed any behavior that appears to bepreparation for terrorist activity, such as mapping outroutes, playing out scenarios with other people, monitoring key facilities, timing traffic lights or trafficflow, or other suspicious activities?

Report Suspicious

Behavior and Activity

Call the Nearest 

Joint Terrorism Task Force (JTTF) to

Report Suspicious Behavior and Activity.

Call 911 if there is an emergency or immediate threat.

Call the nearest Joint Terrorism Task Force (JTTF)

to report suspicious activity or behavior.

Submit information electronically at https://tips.fbi.gov Submit information electronically at https://tips.fbi.gov