◇ OpenCyber Academy
Technologist · Chapter 28 · English

Chapter 28 — Field practice

Open, free learning for anyone who wants to protect people and technology. No account is required to read this text or its worked answers.

Chapter 28 — Field practice

Lesson map

Lesson 28 published. Map, example, EX082.

flowchart TD
  N0["Learning outcomes"]
  N1["28.1 Visits"]
  N2["28.2 Staff"]
  N3["28.3 Observations"]
  N4["28.4 Follow-up"]
  N0 --> N1 --> N2 --> N3 --> N4
  N4 --> EX["Worked example"]
  EX --> Q["Exercise EX082"]

Logical drawing

flowchart LR
  N0["Learning outcomes"]
  N1["28.1 Visits"]
  N2["28.2 Staff"]
  N3["28.3 Observations"]
  N4["28.4 Follow-up"]
  N0 --> N1 --> N2 --> N3 --> N4 --> Q["EX082"]
[Learning outcomes]
    |
    v
[28.1 Visits]
    |
    v
[28.2 Staff]
    |
    v
[28.3 Observations]
    |
    v
[28.4 Follow-up]
    |
    v
[Worked example] --> [Exercise EX082]

Learning outcomes

You will (1) apply skills in clubs; (2) talk with staff; (3) record observations.

28.1 Visits

Aisha visits five clubs to check screens, CCTV signs and records. Each visit follows a checklist: reception screens locked when unattended, no member lists visible, CCTV signs present and readable, recorders in locked rooms, guest Wi-Fi separate, and the reporting form known to staff. Aisha chooses clubs of different sizes and ages, including two with older recorders, so that the visits cover a range of conditions. Each visit takes about ninety minutes, and she photographs only signs and room doors, never screens or people.

28.2 Staff

She talks with staff about the guide and reporting. Staff are friendly and open about difficulties. Several say the reporting form is easy, but one club had not heard of it because its manager was new. Trainers like the new notes field. Reception staff ask for a quick way to answer members who ask what data Quayside holds, so Aisha drafts a short script. The script tells staff to point members to the access request form in the app rather than reading out data at the desk.

28.3 Observations

Two clubs lacked CCTV signs, which EDPB Guidelines 3/2019 expect as a first layer of information. Other observations include a reception screen left unlocked during a busy period and a recorder room used as a store cupboard with the door open. The EDPB guidelines describe a warning sign as the first layer of transparency, telling people about monitoring before they enter the area, with fuller information available elsewhere. Missing signs mean members enter monitored areas without notice. Both clubs had removed old signs during painting and never replaced them.

28.4 Follow-up

Signs are installed. Mr. Reilly notes that field visits find what remote checks miss. Signs are installed within two weeks, the store cupboard is cleared and locked, and the new manager receives an introduction to the reporting form. Aisha adds the checklist to the regional managers' routine visits, so field checks continue after her placement. She shares common findings with all clubs without naming individual staff. Regional managers report results quarterly, and repeated findings at the same club trigger a conversation with its manager.

Worked example

Aisha visits five clubs, finds two missing CCTV signs and gets them installed.

Synthetic case. Visits are synthetic; EDPB Guidelines 3/2019 are real.

Errors and limits

Visits are snapshots.

Exercises

Continue studying — lesson 28 (chapter 28 of 30)

← Chapter 27 · Course chapter index · Chapter 29 →

Continue to the next authored lesson.