The observer should verify the accuracy of the observation through large-scale testing before reporting it further.

It is the responsibility of the author of the observation - any member of the university staff or students - to notify the IT Helpdesk.

An individual student should not make observations about information security, as it is not a part of their responsibilities.