OpenCyber Academy
Rapid course · Lesson 15 · English
Course code: OCA-002Lesson 15: OCA-002-A015

Wipe is not the first move

Open, free learning for anyone who wants to protect people and technology. No account is required to read this text or its worked answers.

Lesson map

Lesson 15 published. Map, example, EX069.

flowchart TD
  T["A consult tablet is missing at closing"] --> C["Call Sofia, then Dr. Moss, then the technician"]
  C --> N{"Are today's notes already in the practice system or on the day's paper?"}
  N -->|Unknown| H["Do not wipe yet"]
  N -->|Only on the tablet| D["Wiping would destroy the only copy. Dr. Moss decides after that fact is logged"]
  N -->|Already copied| W["A wipe can then be considered and logged"]

Remote wipe deletes the device copy. It does not check whether that copy was the only one.

Logical drawing

tablets: passcode and remote wipe, already configured
incident card: lost tablet is an incident
missing at closing is not yet a logged loss
    |
    +-- call order before any wipe command
    +-- ask where today's notes live
    +-- this lesson does not send a wipe

Learning outcomes

After this chapter, you should be able to:

  1. Use the incident-card call order before a remote wipe.
  2. Ask whether today's notes exist anywhere except the missing tablet.
  3. Hold the wipe when the tablet may be the only copy of those notes.

15.1 The control can destroy the record it was meant to protect

Consulting-room tablets have a passcode and remote wipe. The incident card lists a lost tablet among the events that start the call order: Sofia, then Dr. Moss, then the technician. At closing, one tablet is not in its room. A classmate wants the wipe sent at once so a stranger cannot read the screen. Wipe removes the copy stored on the device. If the afternoon's notes were typed only there, and were not written on the day's appointment sheet, the wipe throws away the clinical record. Confidentiality of a found tablet and availability of today's notes are in tension. The tension is resolved by looking, not by speed.

Staff ask where the notes are. If nobody can show them in the practice system or on paper, that fact is told to Dr. Moss and written in the change log before any wipe. This lesson does not declare the tablet stolen, and it does not send the command.

15.2 Worked example

Lesson table; scroll horizontally to read all columns →

Situation at closing Where the notes are Decision
Tablet not in the room Not yet checked Call in card order. Do not wipe
Notes already in the practice system A copy exists off the device A wipe can be considered and must be logged
Notes only on the tablet Wipe would be the deletion Stop. Dr. Moss decides after the log records that fact
"Disconnect it from the network" The device is not here to unplug The computer step does not apply. Use the call order

Synthetic case. No animal, client, or dose is on this tablet in the exercise. Do not invent one.

Errors and limits

Holding a wipe is not a decision to ignore a lost device. The card still makes it an incident once it is reported as lost. This chapter does not estimate how far the tablet travelled, and it does not publish a tracking result.

Apply

Worked answers

EX069. Call Sofia, then Dr. Moss, then the technician. Hold the wipe until today's notes are shown in the practice system or on the day's paper. If they exist only on the tablet, Dr. Moss decides after that fact is logged. No wipe is sent by this answer.