Chapter 29 — Professional practice

Chapter 29 — Professional practice

Lesson map

Lesson 29 published. Map, example, EX085.

flowchart TD
  N0["Learning outcomes"]
  N1["29.1 Ethics of access"]
  N2["29.2 Communication"]
  N3["29.3 Continuing learning"]
  N4["Synthesis"]
  N0 --> N1 --> N2 --> N3 --> N4
  N4 --> EX["Worked example"]
  EX --> Q["Exercise EX085"]

Logical drawing

flowchart LR
  N0["Learning outcomes"]
  N1["29.1 Ethics of access"]
  N2["29.2 Communication"]
  N3["29.3 Continuing learning"]
  N4["Synthesis"]
  N0 --> N1 --> N2 --> N3 --> N4 --> Q["EX085"]

[Learning outcomes]
    |
    v
[29.1 Ethics of access]
    |
    v
[29.2 Communication]
    |
    v
[29.3 Continuing learning]
    |
    v
[Synthesis]
    |
    v
[Worked example] --> [Exercise EX085]

Learning outcomes

You will (1) work ethically with privileged access; (2) communicate with colleagues; (3) continue learning.

29.1 Ethics of access

As an administrator, Kai can see staff sign-in records and client data. He follows Fernhill's rules: access data only for a work purpose, record why when searching logs and never use access out of curiosity. When a manager asks him informally to check a colleague's sign-in times to judge punctuality, he explains that this is not a security purpose and refers the request to HR's formal process. Trust in identity administration depends on administrators using their access responsibly. He records the request and his answer.

29.2 Communication

Kai learns to explain changes before making them: why passkeys, what staff need to do, and where to get help. He sends short notices, runs drop-in sessions at each clinic and answers questions without technical jargon. When the reception sign-in change causes a few complaints, he visits the clinics, watches the problems and adjusts settings. Listening and explaining make staff partners in security rather than reluctant subjects. He also asks staff for feedback after each change. Their comments improve later notices. Clinic managers help by sharing notices at team meetings.

29.3 Continuing learning

Identity practice changes as standards and products evolve. Kai reads updates to NIST guidance, follows supplier change notes and keeps a learning log reviewed with Ruth each term. He shares what he learns at Harlow Polytechnic's student group. Continuing learning keeps his advice current, and recording it shows employers how his knowledge has developed over the programme. Ruth reviews the log with him each term, discussing what he found useful and what he wants to study next. He also attends a supplier webinar on passkeys and an online talk on access reviews. These notes help him later.

Worked example

Kai declines an informal punctuality check request and refers it to HR; drop-in sessions are held at all five clinics.

Synthetic case. Events are synthetic.

Errors and limits

Using administrator access to answer non-security questions about colleagues abuses trust.

Exercises

• EX085 — Declined request. What informal request did Kai decline? Rubric: 3 = checking a colleague's sign-in times for punctuality;; 2 = punctuality;; 1 = reset;; 0 = none.
• EX086 — Complaint response. How did Kai respond to reception complaints? Rubric: 3 = visited, watched, adjusted settings;; 2 = adjusted;; 1 = ignored;; 0 = none.
• EX087 — Learning log. Who reviews Kai's learning log? Rubric: 3 = Ruth, each term;; 2 = mentor;; 1 = nobody;; 0 = none.

Synthesis

Ethical use of access, clear communication and continued learning are part of professional identity work.

Continue studying — chapter 29 of 30

← Chapter 28 (draft) · Course chapter index · Chapter 30 (draft) →