Report Cybersecurity Incident - Québec City Bylaw

In Québec, Quebec, municipal staff and residents must know how to report cybersecurity incidents that affect city systems or services. This article explains who is responsible at the city level, the practical steps to report an incident, likely enforcement pathways and what to expect for penalties, appeals and evidence preservation. Use these procedures to limit harm, preserve records and meet municipal reporting expectations when a compromise affects city infrastructure, data or citizen services.

Penalties & Enforcement

The City of Québec handles incidents that affect municipal systems through its information technology services and related corporate security functions. Specific bylaw fines or statutory monetary penalties for cybersecurity incidents are not specified on the cited municipal page; enforcement tends to be internal, administrative and may involve referral to police or provincial authorities for criminal matters.^[1]

• Enforcer: Service des technologies de l'information or the city security office; criminal matters are referred to police.
• Inspection and complaint pathway: report to City IT using the official contact or incident form where provided; preserve logs and evidence.
• Fines: not specified on the cited page for municipal cybersecurity incidents.
• Appeals and review: administrative decisions may be reviewable under municipal procedures; specific time limits are not specified on the cited page.
• Defences and discretion: the city may consider reasonable excuse, mitigations and good-faith disclosure; no formal permit or variance process for incidents is published on the cited municipal page.

Applications & Forms

No dedicated public incident-reporting form is published on the cited municipal page; employees and contractors should use internal IT reporting channels and external victims should contact City IT or local police as appropriate.^[1]

How-To

1. Contact City IT immediately by the official phone or email listed by the municipality and follow their instructions.
2. Preserve logs, systems images and chain-of-custody for evidence; do not power off compromised devices without guidance.
3. Isolate affected systems to limit spread and apply containment measures advised by IT.
4. Document timelines, actions taken and affected services for incident records and any required disclosure.
5. If criminal activity is suspected, notify police and coordinate with City IT for joint response.

FAQ

Who do I contact at the City of Québec to report a cybersecurity incident?

Contact the City of Québec information technology service or the official municipal contact channel; see the city contact page for current details.^[1]

Will the city publish fines for cybersecurity breaches?

The cited municipal page does not specify fines for cybersecurity incidents; enforcement is typically administrative or referred to police when criminal conduct is involved.

Do I need to fill a specific form to report an incident?

No public incident form is published on the cited municipal page; follow City IT reporting instructions and preserve evidence.

Key Takeaways

• Report incidents promptly to City IT to reduce harm and preserve evidence.
• Preserve logs and follow City IT guidance before system recovery.
• Monetary penalties for municipal cybersecurity incidents are not specified on the cited page; criminal referrals may apply.

Help and Support / Resources

• Ville de Québec - Official site
• Government of Canada - Canadian Centre for Cyber Security
• Gouvernement du Québec - Official site

1. [1] Ville de Québec - Technologies de l'information and municipal contacts