OpenCyber Academy
Rapid course · Lesson 13 · English
Course code: OCA-002Lesson 13: OCA-002-A013

An open session is still a shared login

Open, free learning for anyone who wants to protect people and technology. No account is required to read this text or its worked answers.

Lesson map

Lesson 13 published. Map, example, EX067.

flowchart TD
  N["A nurse is signed in"] --> H["A helper asks to use that screen"]
  H --> A{"Would the helper's actions be recorded as the nurse?"}
  A -->|Yes| F["Refuse the session"]
  F --> P["A personal account waits for Dr. Moss's log line"]
  A -->|No| O["Only if the helper has already signed in as themselves"]

The password on the note was removed. The live screen can recreate the same defect.

Logical drawing

shared reception login: already refused
nurse's own account: signed in at the desk
Saturday helper, unnamed: "only to print the rota"
    |
    +-- the print would be attributed to the nurse
    +-- stepping away does not lend the session
    +-- a new account is not created in this lesson

Learning outcomes

After this chapter, you should be able to:

  1. Treat use of another person's signed-in screen as a shared login.
  2. Refuse a one-task exception for printing the rota.
  3. Hold any new helper account until Dr. Moss has approved it in the change log.

13.1 The account can be personal while the screen is shared

Chapter 2 removed the reception password from under the keyboard and gave people their own accounts. That repair fails if a signed-in screen is handed over. A Saturday helper, who is not named in this case, asks to use the nurse's session only long enough to print the rota. The practice system would record the helper's clicks as the nurse. A later question about who looked at a record could not be answered. The few seconds it takes to switch users, already timed on a busy morning, are not a reason to skip the switch when the nurse is leaving the chair.

Sofia refuses the borrowed session. If the helper needs an account, it is a personal one, with a second factor, approved by Dr. Moss in the change log before the first use. This lesson does not open that account.

13.2 Worked example

Lesson table; scroll horizontally to read all columns →

Request What the log would show Decision
"I will only print the rota." The nurse's name on the activity Refuse
"The nurse said I could, and she is in the room." Still one session Refuse until the helper signs in as themselves
"Create me a login now, the printer is waiting." No approval line Wait for Dr. Moss's written approval
Helper already has an approved personal account Their own name on the activity They sign in as themselves

Synthetic case. The helper has no personal name. Do not add one.

Errors and limits

Refusing the session does not disable the nurse's account, and it does not decide the locum's leftover account from Chapter 8. A rota that part-time staff check from home still belongs behind sign-in, as Chapter 2 already placed it.

Apply

Worked answers

EX067. Refuse the borrowed session. The helper's clicks would be recorded as the nurse. A personal account, if needed, waits for Dr. Moss's approval in the change log before first use. This answer does not create the account.