Cyber Incident Reporting

The Insurance Commission partners with cyber response specialist Atmos to provide agencies with access to a 24/7, 365 day Cyber Incident Hotline.

If you need immediate assistance with a cyber incident contact Atmos by calling the hotline.

Phone 1800 737 667
Email response@atmosgroup.com.au

You will need to advise Atmos that you are a Western Australian Government agency insured with the RiskCover Fund and provide them with details of the incident that you are dealing with.

Atmos can assist you throughout a breach event. They will provide triage/assistance and following this, with approval from the Insurance Commission, they will work with agencies to coordinate the engagement of any other specialist services as required. Atmos will work with you to:

• contain a breach;
• provide advice on a range of matters, including regulatory notification obligations;
• investigate a breach; and
• coordinate and engage IT and other specialists, including legal, forensic, public relations, credit monitoring services etc., as required.

The Office of Digital Government (DGov), within the Department of the Premier and Cabinet, provides cyber security capability building and advice. DGov is also responsible for incident reporting and response co-ordination for the Western Australian Public Sector. Public Sector agencies are required to report all verified cyber security incidents to DGov. DGov will coordinate information sharing and situational awareness across state, interstate and federal jurisdictions. DGov works closely with the WA Police Force Technical Crimes Unit and the Australian Cyber Security Centre who can provide response and investigative services.

Cyber incidents can be reported to DGov via any of the following:

• Online incident response portal -irp.dpc.wa.gov.au/
• Email - cybersecurity@dpc.wa.gov.au
• Phone - 08  6552 6442

As soon as you suspect any theft, loss, unauthorised disclosure of, or unauthorised access to, information within your agency, you should notify the Insurance Commission as soon as practicable by email to cyberincident@icwa.wa.gov.au.

Please include in your notification:

• a short description of the incident;
• scale/size of the incident;
• the date the incident occurred (if known);
• the date your agency discovered the incident; and
• contact details of your agency's designated breach coordinator.