Chapter 9 — Communication, ethics and reporting
Lesson map
Lesson 09 published. Map, example, EX041.
flowchart TD
N0["Learning outcomes"]
N1["9.1 Writing the report"]
N2["9.2 An ethical dilemma"]
N3["9.3 Communicating uncertainty"]
N4["Synthesis"]
N0 --> N1 --> N2 --> N3 --> N4
N4 --> EX["Worked example"]
EX --> Q["Exercise EX041"]
Logical drawing
flowchart LR
N0["Learning outcomes"]
N1["9.1 Writing the report"]
N2["9.2 An ethical dilemma"]
N3["9.3 Communicating uncertainty"]
N4["Synthesis"]
N0 --> N1 --> N2 --> N3 --> N4 --> Q["EX041"]
[Learning outcomes]
|
v
[9.1 Writing the report]
|
v
[9.2 An ethical dilemma]
|
v
[9.3 Communicating uncertainty]
|
v
[Synthesis]
|
v
[Worked example] --> [Exercise EX041]
Learning outcomes
You will (1) write a security report for decision makers; (2) handle an ethical dilemma honestly; (3) communicate uncertainty.
9.1 Writing the report
Owen writes his first formal report to Thornbury's leadership on the repairs and refund work. He starts with a one-page summary: what was found, what has been done, what remains and what decisions are needed. Details follow in sections with evidence. He avoids jargon and explains consequences in terms leaders care about, such as tenant safety and financial loss. Ines reviews drafts and asks him to remove two paragraphs describing his methods at length, which belong in an appendix rather than the summary.
9.2 An ethical dilemma
While reviewing access, Owen finds that a senior manager has viewed safeguarding notes for tenants outside her area several times. It may be legitimate or may be misuse. Owen does not investigate further himself or confront the manager. He reports the facts, without accusations, to the data protection officer as Thornbury's policy requires, and keeps the matter confidential. Ines explains that practitioners must report concerns through proper channels, avoid acting beyond their authority and protect the people involved until facts are established.
9.3 Communicating uncertainty
Leaders ask whether Thornbury is now safe from refund fraud. Owen answers honestly: the new controls block the method used in the past case, but determined criminals may try other routes, such as compromising a tenant's email. He gives his confidence in each control and explains what monitoring will show if fraud attempts continue. Clear statements of uncertainty help leaders make sensible decisions and avoid the disappointment and mistrust that follow overconfident claims when something later goes wrong. He puts these confidence levels in a short table.
Worked example
Owen writes a leadership report with a one-page summary, reports a possible access misuse through proper channels and states uncertainty honestly.
Synthetic case. The report and events are synthetic.
Errors and limits
Summaries can omit important caveats. Reporting concerns can strain working relationships.
Exercises
- EX041 — Summary content. What does the one-page summary contain? Rubric: 3 = findings, actions taken, what remains and decisions needed;; 2 = three;; 1 = vague;; 0 = none.
- EX042 — Appendix material. What did Ines ask Owen to move to an appendix? Rubric: 3 = lengthy method descriptions;; 2 = methods;; 1 = vague;; 0 = none.
- EX043 — Access concern. How did Owen handle the manager's access to safeguarding notes? Rubric: 3 = reported facts to the data protection officer without investigating or confronting;; 2 = proper channel;; 1 = confronted;; 0 = none.
- EX044 — Honest answer. How did Owen answer whether Thornbury is safe from refund fraud? Rubric: 3 = controls block the past method but other routes remain;; 2 = uncertainty;; 1 = yes;; 0 = none.
- EX045 — Confidentiality. Why keep the access concern confidential? Rubric: 3 = to protect people until facts are established;; 2 = protect;; 1 = vague;; 0 = none.
Synthesis
Professional reporting is clear for decision makers, ethical in handling concerns and honest about uncertainty.
Continue studying — chapter 09 of 12
← Chapter 08 (draft) · Course chapter index · Chapter 10 (draft) →