◇ OpenCyber Academy
Professional · Chapter 9 · English

Chapter 9 — Communication, ethics and reporting

Open, free learning for anyone who wants to protect people and technology. No account is required to read this text or its worked answers.

Chapter 9 — Communication, ethics and reporting

Lesson map

Lesson 09 published. Map, example, EX041.

flowchart TD
  N0["Learning outcomes"]
  N1["9.1 Writing for managers"]
  N2["9.2 Ethical tensions"]
  N3["9.3 Fair reporting"]
  N4["9.4 Reporting to candidates"]
  N0 --> N1 --> N2 --> N3 --> N4
  N4 --> EX["Worked example"]
  EX --> Q["Exercise EX041"]

Logical drawing

flowchart LR
  N0["Learning outcomes"]
  N1["9.1 Writing for managers"]
  N2["9.2 Ethical tensions"]
  N3["9.3 Fair reporting"]
  N4["9.4 Reporting to candidates"]
  N0 --> N1 --> N2 --> N3 --> N4 --> Q["EX041"]

[Learning outcomes]
    |
    v
[9.1 Writing for managers]
    |
    v
[9.2 Ethical tensions]
    |
    v
[9.3 Fair reporting]
    |
    v
[9.4 Reporting to candidates]
    |
    v
[Worked example] --> [Exercise EX041]

Learning outcomes

You will (1) write privacy findings for managers; (2) handle ethical tensions; (3) report clearly and fairly.

9.1 Writing for managers

Marta prepares a report for Halden's managing director. Ms. Lin advises her to start with decisions needed, not background. The first page lists three decisions: approve the deletion job, fund laptop replacements for the two unencrypted machines and adopt the no-printed-notes rule. Each decision has a short reason, a cost estimate and the risk of not acting. Detailed evidence follows in an appendix. The managing director reads the first page in five minutes and approves all three decisions. The appendix holds the evidence.

9.2 Ethical tensions

A client employer asks Halden to tell them which candidates have disabilities so they can plan adjustments in advance. Marta recognises a tension: the client's goal sounds helpful, but sharing health information without the candidate's choice is neither necessary nor fair. She recommends that Halden ask each candidate whether they want adjustments communicated, and share only the adjustment needed, not the condition. Ms. Lin notes that ethical reasoning often finds a way to meet the legitimate goal while protecting the person. Consent unlocks the solution.

9.3 Fair reporting

Marta's findings involve individual consultants, such as the one who emailed a CV to a personal address. In her report she describes the event and the process gap without naming the consultant, and she notes that no technical block existed at the time. The data protection lead knows the details and handles any individual follow-up separately. Marta explains that reports aimed at improving systems should focus on causes, and that naming individuals in wide reports discourages others from reporting problems. Systems change; people learn.

9.4 Reporting to candidates

Marta also improves how Halden explains privacy to candidates. The privacy notice is rewritten in plain language with sections for applying for a role, staying in the talent pool, references and background checks. It states retention periods in months, not vague phrases. A short version appears on the application form, with a link to the full notice. She tests the short version with five synthetic personas representing different candidates and adjusts wording that might confuse candidates who are not native English speakers.

Worked example

Marta writes a decision-first report approved in one reading, resolves a client request for disability information by sharing only needed adjustments with consent, reports causes without naming staff and rewrites the candidate notice.

Synthetic case. The report and notice are synthetic.

Errors and limits

Plain language must remain accurate; check legal points with the data protection lead.

Exercises

Continue studying — lesson 09 (chapter 09 of 12)

← Chapter 08 · Course chapter index · Chapter 10 →

Continue to the next authored lesson.