In the event of an Information security incident, system users' roles and responsibilities are to...

Report suspected or known incidents upon discovery through the Servicedesk

Preserve evidence if necessary

Cooperate with investigative personnel during investigation if needed

Make the information security incident details known to all employees