Centre for Critical Infrastructure Protection

Why Inform CCIP?

In New Zealand, there is a need for reporting the discovery of a cyber incident for the following reasons:

To enable the CCIP to assess the severity and extent of the threat;

To minimise the consequences resulting from cyber incidents;

To ensure that there is a coordinated response to cyber incidents; and

To provide ongoing support and assistance to the affected organisation.

The primary source of incident information comes from the community itself.
It is extremely important that all cyber incidents are reported to the CCIP at incidents@ccip.govt.nz

When reporting a cyber incident, one or more of the following categories should be used:

• Successful unauthorised access
• Reconnaissance scans, network probes or attempted access
• Denial of Service (DoS)
• Data corruption and/or loss
• Data interception, monitoring and/or exfiltration
• Actual malicious software infection
• Other anomalous behaviour, malware, hacking or exploitation of new vulnerabilities (zero-day) in hardware or software systems.