Any employee or contractors who discovers any event of a questionable, fraudulent, or illegal nature should:

1. Report the situation via Slack or email to our Incident Response Team, which is defined in the Incident Response Policy.
2. Fill out the incident report form.

These reports should be made without fear of retaliation.

The incident response team will evaluate the incident and determine whether to notify the client. Situations the require escalation to the client include:

• Identification of malicious activity
• Unauthorized use of system privileges
• Unauthorized access to sensitive data,
• Execution of malware that destroys data.

• Timelines to notify Omnicom or Omnicom's agencies of any incident or potential incident

• Defined roles and responsibilities for the personnel who would notify Omnicom or Omnicom's agencies

• A process to communicate the escalation procedure to all the staff in the organization