Lesson map
Lesson 15 published. Map, example, EX069.
flowchart TD
T["A consult tablet is missing at closing"] --> C["Call Sofia, then Dr. Moss, then the technician"]
C --> N{"Are today's notes already in the practice system or on the day's paper?"}
N -->|Unknown| H["Do not wipe yet"]
N -->|Only on the tablet| D["Wiping would destroy the only copy. Dr. Moss decides after that fact is logged"]
N -->|Already copied| W["A wipe can then be considered and logged"]
Remote wipe deletes the device copy. It does not check whether that copy was the only one.
Logical drawing
tablets: passcode and remote wipe, already configured
incident card: lost tablet is an incident
missing at closing is not yet a logged loss
|
+-- call order before any wipe command
+-- ask where today's notes live
+-- this lesson does not send a wipe
Learning outcomes
After this chapter, you should be able to:
- Use the incident-card call order before a remote wipe.
- Ask whether today's notes exist anywhere except the missing tablet.
- Hold the wipe when the tablet may be the only copy of those notes.
15.1 The control can destroy the record it was meant to protect
Consulting-room tablets have a passcode and remote wipe. The incident card lists a lost tablet among the events that start the call order: Sofia, then Dr. Moss, then the technician. At closing, one tablet is not in its room. A classmate wants the wipe sent at once so a stranger cannot read the screen. Wipe removes the copy stored on the device. If the afternoon's notes were typed only there, and were not written on the day's appointment sheet, the wipe throws away the clinical record. Confidentiality of a found tablet and availability of today's notes are in tension. The tension is resolved by looking, not by speed.
Staff ask where the notes are. If nobody can show them in the practice system or on paper, that fact is told to Dr. Moss and written in the change log before any wipe. This lesson does not declare the tablet stolen, and it does not send the command.
15.2 Worked example
Lesson table; scroll horizontally to read all columns →
| Situation at closing | Where the notes are | Decision |
|---|---|---|
| Tablet not in the room | Not yet checked | Call in card order. Do not wipe |
| Notes already in the practice system | A copy exists off the device | A wipe can be considered and must be logged |
| Notes only on the tablet | Wipe would be the deletion | Stop. Dr. Moss decides after the log records that fact |
| "Disconnect it from the network" | The device is not here to unplug | The computer step does not apply. Use the call order |
Synthetic case. No animal, client, or dose is on this tablet in the exercise. Do not invent one.
Errors and limits
Holding a wipe is not a decision to ignore a lost device. The card still makes it an incident once it is reported as lost. This chapter does not estimate how far the tablet travelled, and it does not publish a tracking result.
Apply
- EX069 — Wipe or wait? A consulting-room tablet is missing at closing. Afternoon notes might exist only on it. Nobody has checked the practice system or the day's paper. What is the call order, and why is the wipe held?
Show marking criteria
Rubric: 3 = call Sofia, then Dr. Moss, then the technician; hold the wipe until someone shows that today's notes exist off the tablet; if they exist only on the device, Dr. Moss decides after that fact is logged;; 2 = the call order and the hold;; 1 = one of those;; 0 = none.