◇ OpenCyber Academy
Technologist · Chapter 28 · English

Chapter 28 — Field practice

Open, free learning for anyone who wants to protect people and technology. No account is required to read this text or its worked answers.

Chapter 28 — Field practice

Lesson map

Lesson 28 published. Map, example, EX082.

flowchart TD
  N0["Learning outcomes"]
  N1["28.1 Professional conduct in a school"]
  N2["28.2 A real incident"]
  N3["28.3 Supervision and boundaries"]
  N4["28.4 Reflective practice"]
  N5["Synthesis"]
  N0 --> N1 --> N2 --> N3 --> N4 --> N5
  N5 --> EX["Worked example"]
  EX --> Q["Exercise EX082"]

Logical drawing

flowchart LR
  N0["Learning outcomes"]
  N1["28.1 Professional conduct in a school"]
  N2["28.2 A real incident"]
  N3["28.3 Supervision and boundaries"]
  N4["28.4 Reflective practice"]
  N5["Synthesis"]
  N0 --> N1 --> N2 --> N3 --> N4 --> N5 --> Q["EX082"]

[Learning outcomes]
    |
    v
[28.1 Professional conduct in a school]
    |
    v
[28.2 A real incident]
    |
    v
[28.3 Supervision and boundaries]
    |
    v
[28.4 Reflective practice]
    |
    v
[Synthesis]
    |
    v
[Worked example] --> [Exercise EX082]

Learning outcomes

You will (1) work professionally in a live school; (2) handle incidents with supervision; (3) reflect on practice.

28.1 Professional conduct in a school

Working in a school has particular rules. Tomás wears his visitor badge, signs in and out, never works alone with students, and avoids looking at screens showing student information. He schedules work around lessons and keeps noise and disruption minimal. Safeguarding training is required before the placement. Professional conduct is part of technical work in such settings; a technically excellent change made in a way that breaks safeguarding rules would be a serious failure. Gareth briefs him on the school's specific rules.

28.2 A real incident

During the spring term, alerts show repeated denied connections from one student laptop towards the administration zone, along with DNS lookups of a newly registered domain. Following the runbook, Gareth disconnects the laptop from the network and contacts the student's head of year. The laptop is found to have malware from a game download. It is cleaned and returned. Segmentation stopped the attempts reaching administration, and monitoring made the event visible within minutes. The student's family is informed by the school following its normal procedures.

28.3 Supervision and boundaries

Tomás assists Gareth during the incident but does not act alone, consistent with the placement agreement. He helps search logs and drafts the incident note. He does not handle the student or the device directly. Working under supervision in real incidents teaches how procedures play out in practice while protecting the school and the student. Afterwards, Gareth and Tomás review the incident and update the runbook to include contacting the safeguarding lead when a student's device is involved. The incident note is filed.

28.4 Reflective practice

Tomás keeps a reflective journal during field practice. After the incident, he writes about what went well, what was unclear and what he would do differently. He notes that the runbook did not say who should speak to the student, which caused a short delay. Reflection turns experience into learning and gives material for his capstone. Ms Okafor reads the journal monthly and discusses it with him, linking events to course concepts. Entries are short and written the same day.

Worked example

One malware incident is contained within minutes; the runbook gains a safeguarding contact step.

Synthetic case. The incident is synthetic.

Errors and limits

Students on placement acting alone in incidents can breach agreements and harm trust.

Exercises

Synthesis

Professional conduct, supervised incident work and reflection make field practice valuable.

Continue studying — chapter 28 of 30

← Chapter 27 (draft) · Course chapter index · Chapter 29 (draft) →