Vancouver IT Security Incident Reporting - City Bylaw
In Vancouver, British Columbia, reportable IT security incidents affecting City systems or services must be escalated promptly to City IT and, when appropriate, to law enforcement. This guide explains who to contact, what information to gather, how incidents are assessed, and the immediate steps to limit harm. Use the City reporting channels for service-impacting events and preserve logs and evidence. If the incident involves criminal activity, the Vancouver Police Department may be engaged for investigation. Report a problem[1] or contact online police reporting where criminal conduct is suspected. Vancouver Police online reporting[2]
Penalties & Enforcement
Enforcement for misuse of City IT resources is handled through internal City disciplinary processes and may be referred to external authorities. Specific monetary fines for IT incidents are not specified on the cited City pages; criminal prosecution or regulatory penalties depend on the nature of the offence and applicable statutes, and may be pursued by the Vancouver Police Department or other authorities.[1]
- Fine amounts: not specified on the cited page.
- Escalation: internal disciplinary action for employees; external referral for suspected crimes — repeat or continuing offences: not specified on the cited page.
- Enforcer: City IT / Information Technology Services for system issues; Vancouver Police Department for criminal matters. Vancouver Police online reporting[2]
- Non-monetary sanctions: remedial orders, suspension of access, termination of accounts, internal discipline, and seizure of affected devices where authorized; specific processes not specified on the cited page.
- Appeals/reviews: employment or administrative appeal routes via City human resources or applicable grievance procedures; time limits for appeals are not specified on the cited page.
Applications & Forms
No dedicated public “IT incident” form is published on the City site; use the City of Vancouver "Report a problem" portal for service-impacting incidents or contact City IT directly. For criminal incidents, use the Vancouver Police Department online reporting tool.[1][2]
How-To
- Contact City IT or the City "Report a problem" portal immediately with a concise summary of the incident, impacted services, and point of contact. Report a problem[1]
- Preserve evidence: do not reboot systems if possible, collect timestamps, save logs, and document steps taken.
- Collect details: affected systems, scope, indicators of compromise, user accounts involved, and any suspicious communications.
- If criminal activity is suspected (theft of data, extortion, malicious intrusion), file a report with the Vancouver Police Department. Vancouver Police online reporting[2]
- Follow City IT directions for containment, remediation, and recovery; cooperate with any internal investigations or audits.
FAQ
- Who should I contact first for a City IT security incident?
- Contact City IT or use the City "Report a problem" portal; if criminal activity is suspected, also contact the Vancouver Police Department.
- Are there fines for security incidents?
- The City pages do not specify monetary fines for IT incidents; disciplinary or legal consequences depend on the nature of the incident and applicable laws.
- What evidence should I preserve?
- Preserve logs, timestamps, system images, and any suspicious messages; document actions taken and notify City IT before altering systems.
Key Takeaways
- Report immediately via the City portal to ensure a coordinated response.
- Preserve evidence and follow City IT instructions to avoid destroying forensic data.
Help and Support / Resources
- City of Vancouver — Report a problem
- City of Vancouver — IT Services (contact)
- Vancouver Police Department — Online reporting