Rapid Incident Reporting
Take immediate action when a security mistake occurs: isolate credentials and report without delay.
Why this matters
Everyone can make a mistake. What matters is how fast you act. Reporting early can stop a small slip from becoming a big breach.
Speed Stops the Damage
Typing a password into a fake page is a mistake. Hiding it is what turns it into a breach, because the attacker keeps access longer.
In real life: If you leave a tap running, tell someone straight away. Telling them next week means the whole floor is flooded. A report right after the mistake keeps the damage small.
The Password Leak Steps
1. Change the password from a device you trust. 2. Sign out other sessions. 3. Tell IT or your security lead right away.
In real life: Think of lost keys: first change the lock (new password), then take back any spare keys (sign out other sessions), then tell the landlord (IT). The order matters.
Change Password -> Revoke Sessions -> Report Incident
Your practice task
A colleague typed their office password into a fake login page a minute ago. Choose what they should do, in order.
How to do it
- Read the leak steps in the box above.
- Choose what your colleague should do first, second, and third.
- Then answer what to do about the reused password.
- Press Run proof.
Practice it for free in the app. You get instant checks that show what you got right and what to fix. A lesson takes about two minutes and you can try as many times as you like.
Quick reference: Credential Leak Trio
Minimizes dwell time and cuts off attacker access.
Step 1: Change password. Step 2: Revoke sessions. Step 3: Alert IT security.
More lessons in this course
- Updates, Backups & Device SafetyKeep devices patched, backed up, and protected so one mistake or theft does not become a disaster.
- Public Wi-Fi, Scam Calls & QR CodesStay safe outside the inbox: open networks, phone scams, and tampered QR codes.
- Disarming Suspicious Links & IOCsDefang dangerous links and IP addresses so they cannot be accidentally clicked, and structure findings into JSON.