Sort Security Triage Actions

Sort each security triage action into its main purpose. Preserve evidence Contain exposure Report or escalate Communicate safely Capture suspicious email headers through the approved report tool. Revoke active sessions after confirmed credential entry, following policy. Open a security incident with timestamp, user, artifact, and exposure details. Tell the user not to click again and not to reply to the sender. Record the lost laptop serial number and last known location. Trigger managed device lock for a laptop reported stolen. Notify security operations that three users received the same payroll lure. Give the user a plain-language summary of what will…

Sign up free — one personalized lesson every day, matched to your role and goals.

Already have an account? Sign in