General work instruction

1. Identify what happened
   • Explain what it is about: a phishing/suspicious message, mistake, error, lost device, message sent to the wrong recipient, etc.
   • You do not need to know why it happened or the exact category.
2. Report immediately to the service desk (Helpdesk, IT support).
   
   
3. Follow the instructions you receive and stay in contact with the service desk.

Submitting a report

When you report to the service desk, include at least:

• Incident description: what happened and when?
• Device details, location, and the service/application used.
• Any error messages and screenshots (full-screen images).

Examples and guidance

Accidentally shared information

• Contact the recipient and ask them to delete the message.
• Report to the service desk — they will escalate as needed.

Lost or stolen device

• Notify the service desk immediately.
• Request a remote lock/wipe and change your passwords.

Data breach or data leak

• Report to the service desk and file a police report if necessary.
• Also contact your bank, the National Cyber Security Centre, and the Data Protection Authority as applicable.

Security incident

• Report the situation to the service desk → information will be routed to the Data Protection Officer or privacy team.
• The privacy team assesses whether authorities must be notified and what further actions are required

Additional support

• Review Metropolia's guidance on the intranet or website.
• The service desk also provides advice during events and training sessions.

Suomeksi: Digiturvallisuuden ongelmatilanteet