If you believe you have discovered a vulnerability or have a security incident to report, please report an incident to Harvard Information Security for next steps.
Use this process for all information security incidents to ensure they are captured correctly and handled in a timely manner. If you’ve discovered a security concern, we will work with you to make sure that we understand the scope of the issue and that we address the exposure. When given sufficient notification, we will do our best to work with any responsible party alerting us to a security issue, assign resources to swiftly investigate the issue, and engage a response team appropriate to the severity of the issue.
For more information, contact Harvard University IT Security.