Staff procedures

A documented rule employees must follow, such as reporting incidents or locking devices, to reduce cyber security risk.

Part of: VCE Applied Computing - U2O2 - Cyber Security — Module 42, 9-10 Digital Technologies Vic Curric - Digital Systems and Security — Module 63, VCE Software Development - U4O2 - Cyber Security: secure software development practices — Module 124, VCE Data Analytics - U4O2 - Cyber Security: Data Security — Module 54

Understanding Staff procedures in VCE Cyber Security

What it does: This code only grants access once the training requirement has been met. Prompt reporting helps IT respond to threats before they cause more damage. Locking devices prevents unauthorised access while staff are away. Training ensures staff understand policies before being granted access. Passwords should never be shared, even with trusted colleagues, to maintain accountability. Following the acceptable use policy is a core part of staff security procedures. Regular reviews catch unnecessary or outdated access before it becomes a risk. Reporting mistakes quickly allows IT to limit any damage from the incident.

Common mistakes: Line 1 skips required training, breaking the staff procedure for granting access. Line 2 delays reporting a suspicious email, going against procedure to report promptly.

Class: _____________________ · Name: _____________________ · Date: _________

Free printable worksheet with full answer key — or add this module to a class and your students practise it interactively.

🖨 Print worksheet + answer key Add Staff procedures to a class →

This module's key terms are also in a printable crossword (Modules 41–50) and word search (Modules 41–74).

Take this worksheet further — free with Cloodit

Each concept is reinforced from every angle — learned, then applied, then tested.

Learning

Duo

Staff procedures include reporting suspicious activity to IT promptly.

TrueFalse

Matches

share_password_anyway()

↓

The mistake: sharing a password despite acknowledging the policy

Applying

Meanings

Term

Staff procedure

Meaning

A documented rule employees must follow, such as reporting incidents or locking devices, to reduce cyber security risk.

Practice

training_complete = True

Testing

Gaps

= True

Check Answer

Spots

1skip_training = True

2grant_access()

Cloodit turns curriculum-aligned coding content into journeys students work through one biome at a time.

Students earn collectable badges

Over 100 of them, across seven natural biomes.

Study Buddy

Students build a real study resource

Turns their work into revision material ready for Flash Cards and Exam study.

Diamond Dash — one of Cloodit's live, competitive Sprint games

Students lock in with Sprints

Live, competitive practice for the start of the lesson or a teacher-led lesson finisher.

A Cloodit certificate of achievement, ready to personalise and print

Custom printable certificates

Honour your top performers, or encourage a student who's trying hard — ready to print in seconds.

Add to class →

Quick Questions

1. Staff procedures include reporting suspicious activity to IT promptly.

A. False

B. True ✓

Prompt reporting helps IT respond to threats before they cause more damage.

2. Which follows correct staff procedure: locking your device when unattended, or leaving it unlocked?

A. Leaving it unlocked

B. Locking your device ✓

Locking devices prevents unauthorised access while staff are away.

3. Skipping required security training before accessing systems follows good staff procedure.

A. False ✓

B. True

Training ensures staff understand policies before being granted access.

4. Which is correct procedure: sharing your password with a trusted colleague, or never sharing it?

A. Never sharing it ✓

B. Sharing with a trusted colleague

Passwords should never be shared, even with trusted colleagues, to maintain accountability.

5. Ignoring an acceptable use policy is an example of following staff procedures.

A. False ✓

B. True

Following the acceptable use policy is a core part of staff security procedures.

Match the Pairs

report_incident(incident) → Notifying IT about a suspicious or security-related event

lock_device() → Securing a device before stepping away from it

Staff should complete training before being granted system access → if training_complete: grant_access()

Regularly reviewing access helps ensure staff only have what they need → review_access()

share_password_anyway() → The mistake: sharing a password despite acknowledging the policy

skip_lock() → The mistake: leaving an unattended device unlocked

Key Term

Staff procedure

A documented rule employees must follow, such as reporting incidents or locking devices, to reduce cyber security risk.

Fill in the Blanks

1. training_complete = True

Hint: Type the name of the variable that flags whether training has been completed.

2. if trainingComplete and accessRequested:

Hint: Type the logical operator that requires both conditions to be true.

3. report_incident(incident)

Hint: Type the name of the function that reports a security incident to IT.

4. def lock_device():

Hint: Type the name of the function that locks an unattended device.

5. policy_followed = True

Hint: Type the name of the variable that flags whether the acceptable use policy was followed.

Spot the Error

Question 1

A skip_training = True

B grant_access()

C log_access()

Line A — Line 1 skips required training, breaking the staff procedure for granting access.

Question 2

A notice_suspicious_email()

B delay_report = True

C report_incident()

Line B — Line 2 delays reporting a suspicious email, going against procedure to report promptly.

Question 3

A leave_desk()

B lock_device()

C walk_away()

Line A — Line 1 leaves the desk before locking the device, breaking the unattended-device procedure.

Question 4

A check_access_policy()

B grant_minimum_access()

C ignore_review_schedule = True

Line C — Line 3 ignores the access review schedule, breaking the ongoing review procedure.

Question 5

A training_complete = True

B if training_complete:

C grant_access()

D else:

E grant_access()

Line E — Line 5 also grants access in the else branch — an incomplete staff member should be denied access instead.

Student with a class code? Join your class →