FAQ

FAQ

Common Questions

When should I report an incident?

Report as soon as you notice unauthorized access, suspicious financial activity, ransomware, impersonation, or data exposure.

What evidence should I keep?

Retain screenshots, logs, emails, URLs, account notices, timestamps, and any relevant device information.

Should I reset passwords first?

Yes, if an account is compromised and it is safe to do so, but preserve evidence before deleting messages or wiping devices.

Is the guidance only for organizations?

No. The SOC Hub is designed for households, students, small businesses, and institutions alike.