This procedure describes AU’s communication emergency response in case of IT system failure, IT attacks, and major IT service and system interruptions.

If the IT system failure occurs outside the hours between 8:00 and 18:00 on a weekday, the head of AU IT and the head of Communication and Press must be contacted first.

1. AU IT informs internally in AU IT/system owners

1. AU IT informs internally in AU IT/system owners

---

2. AU IT and Communication and Press plan communication

• AU IT and Communication and Press each appoint a contact person/coordinator for communication during the situation.
• AU IT and Communication and Press agree which message to communicate and which channels to use.

Special focus areas in connection with communication:

• Which IT services are not working?
• Which IT services are working?
• Expected downtime?
• When will more information be available?
• Are any alternatives available to users?
• Will IT staff be available to answer questions posted on social media?  

3. The university director is informed.

• The university director decides whether or not to initiate AU’s overall emergency response.
  (Person responsible: To be agreed between the coordinators)

4. Communication and Press provides internal information  

5. Communication and Press provides external information, if necessary

---

6. AU IT informs management 

• AU IT sends information about the status of the situation to the senior management team and LEA. This should usually be done when the IT system failure situation is over, and should include an assessment of the situation and whether or not it could happen again.