OpenCyber Academy
Rapid course · Lesson 12 · English
Course code: OCA-006Lesson 12: OCA-006-A012

A name on the report line breaks the record

Open, free learning for anyone who wants to protect people and technology. No account is required to read this text or its worked answers.

Lesson map

Lesson 12. Map, example, EX058.

flowchart TD
  R["A report arrives"] --> F["Record date, type and outcome only"]
  F --> N{"Does someone add who sent it?"}
  N -->|Yes| X["Refuse the name"]
  N -->|No| K["Forward without clicking, and do not investigate alone"]

The record can be useful without becoming a list of people.

Logical drawing

allowed fields
    date
    type
    outcome
not allowed
    who reported
handling
    do not click links
    do not open attachments
    forward by the agreed method to the IT volunteer
serious report
    follow incident steps with the IT volunteer
    do not investigate alone
        |
        +-- no person is named in this lesson
        +-- no link is opened

Learning outcomes

After this chapter, you should be able to:

  1. Keep a report record to date, type and outcome.
  2. Refuse a name on that line.
  3. Leave investigation of a serious report with the incident steps and the IT volunteer.

12.1 The welcome does not collect an identity

Ruth records only the date, the type and the outcome of a report, not who sent it. That limit protects the person who spoke up. A classmate adds a name "so the thanks can be personal," and also opens the link to see whether the message is real. Thanks can be given without storing the name in the log. Opening the link is the act the handling rule forbids. If the report looks serious, Ruth follows the incident steps and asks the IT volunteer for help. She does not investigate it alone, and she does not invent a name in order to refuse one.

12.2 Worked example

Lesson table; scroll horizontally to read all columns →

Addition Allowed? Decision
Date, type, outcome Yes Keep those three
The reporter's name No Leave it off
Click the link to check No Do not click
A serious case investigated by Ruth alone No Incident steps, with the IT volunteer

Synthetic case. No reporter is named and no message body is quoted.

Errors and limits

Omitting the name does not mean the report is ignored. The outcome is still recorded, and a serious case still moves.

Apply

Worked answers

EX058. Record only date, type and outcome. Do not record the name. Do not click. Do not invent a name. A serious report follows incident steps with the IT volunteer.