OpenCyber Academy
Rapid course · Lesson 9 · English
Course code: OCA-003Lesson 09: OCA-003-A009

A locked folder is not a six-month review

Open, free learning for anyone who wants to protect people and technology. No account is required to read this text or its worked answers.

Lesson map

Lesson 09 published. Map, example, EX063.

flowchart TD
  F["Allergy notes sit in the locked folder"] --> R{"Is there a review with the customer, dated within six months?"}
  R -->|No| O["The review is due. The lock does not replace it"]
  R -->|Yes| K["Cite that dated conversation"]

The folder answers who can see the note. The review answers whether the note is still right.

Logical drawing

rule: allergy notes, locked, shown only to staff preparing that order
period: review with the customer every six months
folder still locked
    |
    +-- a lock is not a conversation
    +-- "we have always had this note" is not a date
    +-- no customer name is invented to fill the gap

Learning outcomes

After this chapter, you should be able to:

  1. Separate the locked folder from the six-month review with the customer.
  2. Treat a missing review date as an open check.
  3. Refuse to invent a customer name or an allergy in order to close the line.

9.1 Two controls, one folder

Allergy notes are health information. They stay in a locked folder and are shown only to staff preparing that customer's order. Separately, Kwame's keeping rule says the notes are reviewed with the customer every six months. A classmate points at the lock and says the review is therefore done. The lock limits who can read. It does not ask the customer whether the note is still right. If the notebook has no review date inside six months, the review is open. Kwame writes that the check is due. He does not type a customer's name or a food into the gap.

9.2 Worked example

Lesson table; scroll horizontally to read all columns →

Evidence offered What it proves Decision
The folder is locked Access control Not the review
"The note has been there for years." Age, without a conversation The review is open
A notebook line: reviewed with the customer, dated this season The rule's act Cite it
"Write 'no nuts' so the page looks complete." An invented allergy Refuse

Synthetic case. No allergy and no customer are added by this lesson.

Errors and limits

An open review does not mean the note should be read aloud at the counter. Access stays with staff preparing that order. This chapter is not medical advice and not a complete account of special-category duties. The privacy course is the next course for those duties.

Apply

Worked answers

EX063. The review is open. The lock is not the conversation. Do not invent an allergy or a customer name.