VirusEscalationProcedure：病毒升级程序.docVIP

Virus Escalation Procedure Background This document has been produced in response to a number of virus issues that have occurred within Knowsley Schools. Failure to deal with virus problems quickly and efficiently can result in a detrimental effect on all users of Information Technology within Knowsley. All users and support organisations of IT have a responsibility to ensure that security is maintained at all times. There are three possible scenarios to consider: A reoccurring problem on one site indicating that there is poor management of security on the site. A virus attack that is an immediate direct threat to all other network users. A problem involving less than 3 machines. It is proposed that the following escalation procedures are adopted by the Learning and Technology Strategy Board to ensure that network integrity is maintained at all times to the highest possible standards. Attached Documents Draft copies of e-mails to schools Flow diagram of procedureEscalation Procedure Less than 3 Machine Problem Reoccurring Problem A major threat to the Knowsley network A security problem is identified by ITD which requires action by a support team or school ITD Inform Principal Manager: Technology, Systems and Communications /Representative Relationship Managers School notified by Relationship Managers with a follow up e-mail to the Head Teacher. KSSC notified if school supported A decision is made on shutting down the CIN link. A decision is made on shutting down the CIN link. The appropriate support team have 3 hours to remove the device from the network. Relationship Managers informed of decision Relationship Managers informed of decision ITD check after 3 hours to see if the device is still on the network and inform Relationship Manager accordingly. School notified by Relationship Managers with a follow up e-mail to the Head Teacher. School notified by Relationship Managers with a follow up e-mail to the Head Teacher. If the device is still on the net