Skip redundant pieces
Information Resources
Information Resources  :  Organizational Units  :  Customer Support

Virus Response Plan

This plan provides a framework to assess virus risks, communicate accurate virus information, contain virus outbreaks quickly, and prevent future infections.

Categories of Responses:

  • No alert: Virus is confirmed a hoax.
  • Minimal alert: Rare or scattered reports. Data gathering and internal notification (customer support, security administrator) needed.
  • Moderate alert: National news coverage, multiple KUMC reports, significant risks identified. Campus-wide notification needed.
  • High alert: Many confirmed KUMC reports, suspension of normal services. Full incident handling or disaster recovery procedures required.

Preventive Measures:

  1. KU Medical Center has a site license for virus protection software.
  2. Virus detection software is installed on all KUMC workstations.
  3. Virus detection software is installed at the email gateway and on all file servers.
  4. DAT files are updated weekly, or more frequently when necessary.
  5. Alert is emailed to Information Resources when virus is detected.
  6. Antivirus software configuration is password-protected to prevent unauthorized changes.

Notification Procedures:

  1. Monitor alert services for announcements regarding virus threats - security administrator, customer support
  2. Check hoax list at McAfee or Symantec before forwarding any virus announcement - everyone
  3. Report virus infections to customer support - everyone
  4. Document reported infections - customer support
  5. Gather data, assess extent of damage (mapped drives), and recommend appropriate actions (DAT update, cleaning utility, etc.) - customer support
  6. Alert security administrator and network development upon receiving multiple reports of a high-risk virus - customer support
  7. Program gateways to block the virus from entering the campus - network development
  8. Issue a campus broadcast message, including virus description, extent of outbreak, vulnerable computers, removal instructions and preventive measures - security administrator
  9. Distribute updated DAT files - customer support
  10. Clean infected computers and restore damaged files from backups if necessary - customer support, system administrators, etc.

Contact information

Contact Customer Support with any questions or problems
913-588-7995 or e-mail customersupport@kumc.edu

Please note that all voice and data work orders should be requested via email to telecom_workorder@kumc.edu.