Reporting Security Incidents
Aims
Goal: report a security incident — named in the first sentence, exact times, honest impact, evidence preserved — with zero minimising language.
The lesson, stage by stage
- Warm up5 min
Warm-up: Report it — even when it's you
2 warm-up questions
- Reading10 min
Reading: What IT security needs from your report
Read a 220-word text about What IT security needs from your report
- Vocabulary8 min
Vocabulary: Incident Response Terms
6 items
- Framework6 min
Framework: The Incident Report
What – When – Impact – Next, 4 steps
- Reading10 min
Reading: Three model reports
Read a 350-word text about Three model reports
- Practice7 min
Practice: Incident Response
Gap-fill exercise, 5 items
- Practice7 min
Practice: Reporting Phrases
Word-ordering exercise, 4 items
- Dialogue10 min
Dialogue: Reporting an Incident
Role-play: You're reporting a suspicious email to IT security (8 lines)
- Discussion10 min
Discussion: Make the call
3 discussion questions
Open the full lesson
The remaining 8 stages of this lesson, with the procedure, the examples and the exercises, are included with Starter, along with the interactive version you can teach from. Lesson 1 of this course is free: the full plan is on this site, and a free account opens it in the interactive player.
Target vocabulary
In a Tuton account these words become your student's vocabulary deck, so they come back in practice between lessons.
This plan comes from the Cybersecurity Essentials course in the Tuton library. Browse all free lesson plans.