Staff procedures

Name:

Date:

Class:

Quick Questions

Shade in the A or B circle for each question.

1. Staff procedures include reporting suspicious activity to IT promptly.

A False

B True

2. Which follows correct staff procedure: locking your device when unattended, or leaving it unlocked?

A Leaving it unlocked

B Locking your device

3. Skipping required security training before accessing systems follows good staff procedure.

A False

B True

4. Which is correct procedure: sharing your password with a trusted colleague, or never sharing it?

A Never sharing it

B Sharing with a trusted colleague

5. Ignoring an acceptable use policy is an example of following staff procedures.

A False

B True

Match the Pairs

Draw a line connecting each item on the left to its match on the right.

Left column		Right column
1report_incident(incident)		ASecuring a device before stepping away from it
2lock_device()		BNotifying IT about a suspicious or security-related event
3Staff should complete training before being granted system access		CThe mistake: sharing a password despite acknowledging the policy
4Regularly reviewing access helps ensure staff only have what they need		DThe mistake: leaving an unattended device unlocked
5share_password_anyway()		Eif training_complete: grant_access()
6skip_lock()		Freview_access()

Definitions

Staff procedure

Fill in the Blanks

Complete each line of code by filling in the missing parts.

__________________ = True

if trainingComplete ___ accessRequested:

_______________(incident)

def ___________():

____________ = True

Spot the Error

Shade in the letter of the line that contains an error.

Question 1

A skip_training = True

B grant_access()

C log_access()

Question 2

A notice_suspicious_email()

B delay_report = True

C report_incident()

Question 3

A leave_desk()

B lock_device()

C walk_away()

Question 4

A check_access_policy()

B grant_minimum_access()

C ignore_review_schedule = True

Question 5

A training_complete = True

B if training_complete:

C grant_access()

D else:

E grant_access()

Answer Key

Staff procedures

Section A: Quick Questions

B — True

B — Locking your device

A — False

A — Never sharing it

A — False

Section B: Match the Pairs

report_incident(incident) → Notifying IT about a suspicious or security-related event

lock_device() → Securing a device before stepping away from it

Staff should complete training before being granted system access → if training_complete: grant_access()

Regularly reviewing access helps ensure staff only have what they need → review_access()

share_password_anyway() → The mistake: sharing a password despite acknowledging the policy

skip_lock() → The mistake: leaving an unattended device unlocked

Section C: Definitions

Staff procedure — A documented rule employees must follow, such as reporting incidents or locking devices, to reduce cyber security risk.

Section D: Fill in the Blanks

training_complete = True

if trainingComplete and accessRequested:

report_incident(incident)

def lock_device():

policy_followed = True

Section E: Spot the Error

A — Line 1 skips required training, breaking the staff procedure for granting access.

B — Line 2 delays reporting a suspicious email, going against procedure to report promptly.

A — Line 1 leaves the desk before locking the device, breaking the unattended-device procedure.

C — Line 3 ignores the access review schedule, breaking the ongoing review procedure.

E — Line 5 also grants access in the else branch — an incomplete staff member should be denied access instead.