Module 16 · 11:38 video + 10-question quiz · free video
I Clicked — Now What? Reporting and the No-Blame Culture
The module every other one depends on: the first ten minutes after a click, a typed password or an opened attachment. The five moves in order, the three cases and how each is handled, the five facts IT needs, what happens after a report (including POPIA notification), and why nobody is ever disciplined for reporting.
The scenario
Monday, 11:15 — an attachment asks you to "enable content", and you did.
The habit this module drills
Report in minutes, not hours.
After this module you can
- ✓Recognise the signs that a click, a download or a sign-in may have been an attack.
- ✓Act correctly in the first ten minutes for each case: you clicked, you typed, you opened.
- ✓Report through your organisation's channel with the five facts IT needs.
- ✓Explain the no-blame rule to a colleague — why it exists and what happens after a report.
What this module evidences: ISO/IEC 27001:2022 clause 7.3 (awareness) and Annex A control A.6.3 (information security awareness, education and training); POPIA Regulation 4(1)(e) (the Information Officer's duty to see that internal awareness sessions are held). The quiz result is recorded against your account, and passing it earns this module’s dated certificate.
Module 16 quiz
Ten “what would you do” scenario questions. Pass mark 80% — retake as often as you like. Pass it and this module’s certificate is issued in your name with the date; it is due again in twelve months. The quizzes and certificates come with a 12-month licence — for one person or for your company.
Loading…