OpenCyber AcademyLesson map
Lesson 08 published. Map, example, EX062.
flowchart TD
L["The change log names the locum account to disable"] --> D{"Is the disable recorded?"}
D -->|No| F["The account is still a leaver finding"]
D -->|Yes| K["The monthly review can cite that log line"]
F --> M["A second factor does not replace the disable"]
The monthly review looks for the missing log line. It does not assume the account died on its own.
Logical drawing
Monday locum
personal account created before the first patient
second factor turned on
log says which account to disable when the locum leaves
|
+-- "the week is over" is not a disable
+-- a security key left in a drawer is not a disable
+-- the review item "leavers' accounts" means check this line
Learning outcomes
After this chapter, you should be able to:
- Treat the log's disable instruction as unfinished until a disable is recorded.
- Refuse to leave the locum account enabled because a second factor exists.
- Record the disable where Dr. Moss and Sofia can read it.
8.1 The second factor is not an off switch
Chapter 2 refused a shared reception login for the locum and created a personal account, with a second factor, before the first patient. The same log says which account to disable when the locum leaves. The monthly routine includes leavers' accounts. A classmate argues the account is safe to keep because sign-in needs the key. The key reduces one path. It does not end the account. A key left at the clinic, or a factor that was never removed, still belongs to an account that should have been closed.
The review question is narrow. Does the change log contain the disable, with a date, after the locum's last day? If it does not, the finding is an open leaver account. Sofia disables it and writes the line. She does not wait for the next incident card to discover a sign-in.
8.2 Worked example
Lesson table; scroll horizontally to read all columns →
| Reason offered for leaving the account | What the log shows | Decision |
|---|---|---|
| "The second factor is on." | A control on a live account | Disable anyway, then write it |
| "The locum might return next month." | No approval from Dr. Moss for a standing account | Disable. A return needs a new approval |
| "The week ended, so the system will have expired it." | No such expiry is recorded | Do not assume it |
| "The disable is already in the log, dated after the last day." | The review item is met | Cite that line. Do not disable twice without checking |
Synthetic case. The locum is unnamed. Do not add a personal name.
Errors and limits
Disabling the locum account does not remove the reception staff's own accounts, and it does not change the twelve closed files. A later locum is a new account, approved again, not a revival of this one unless Dr. Moss writes that decision.
Apply
- EX062 — Leaver or leftover? The locum's last day has passed. The log still only says which account to disable. The second factor remains on. What is the finding, and what line must be added?
Show marking criteria
Rubric: 3 = the account is still open; disable it; write the date in the change log; the second factor is not a substitute;; 2 = disable and record it;; 1 = one action;; 0 = none.