15–20 MINUTE SELF-PACED MODULE

See something wrong? Stop and report it.

A simple guide for what to do when something looks wrong at work.

Short lessonsReal choices10-item check
1STOP 2DON’T FIX IT 3REPORT IT 4FOLLOW INSTRUCTIONS
READYsimple response
READY WHEN YOU ARE

Let’s begin

Enter your details, then start.

Your progress is saved on this device. Your post-test result is recorded.

Based on BPO Resono Inc. Incident Response Procedure IT_007 v2Report fast. Preserve facts. Keep it private.
DiscussionLearn the simple rule first.

THE BIG IDEA

If something looks wrong, stop.

You do not need to prove what happened. Stop what you are doing, do not try to fix it, and report what you saw.

Remember: STOP → DON’T FIX IT → REPORT IT → FOLLOW INSTRUCTIONS.

Facts over guessesPreserve over eraseReport over hide
QUICK REVIEWOpen all 4 cards. Each one shows what to do.
0 of 4 cards reviewed

0 of 4 cards reviewed

DiscussionKnow your part. Keep it simple.

KNOW YOUR ROLE

Your job is simple.

You do not investigate or fix the problem yourself. Stop, leave it as it is, report it, and follow instructions.

Remember: STOP → DON’T FIX IT → REPORT IT → FOLLOW INSTRUCTIONS.

QUICK REVIEWOpen both cards: one for before you report and one for after.0 of 2 cards reviewed

0 of 2 cards reviewed

SIGNAL SCAN

Find 3 warning signs.

Tap the 3 parts that look suspicious. Then check your choices.

MESSAGE REVIEW09:14
Account check requiredLook before you act.
ACTIVITY · SIGNAL SCAN

Pick the 3 suspicious parts.

Choose exactly 3 things that should make you stop.

0 of 3 selectedSelect three clues, then check your answer.

RESPONSE SPRINT

Choose the safest first step.

Read 4 short situations. Pick what you should do first.

0 of 4 incidents handledOne correct move unlocks the next incident.
RESPONSE SPRINT · INCIDENT 1 OF 4

INCIDENT RESPONSE SIMULATOR

Pick a situation. Make one safe choice at a time.

Finish all 3 situations. Read one step, choose the safest action, then move to the next step.

Choose a situation to start.A popup will guide you one step at a time.

EVIDENCE LOCKER

Keep the useful facts.

Choose 4 things the response team may need. Do not choose passwords, guesses, or cleanup actions.

Remember

Do not delete, test, or copy the problem. Never include your password. Report only what you know.

CASE FILEChoose 4 useful facts.
0 of 4 selected

INCIDENT DISPATCH

Who should you report it to?

Read each short issue. Choose the right person or team to tell.

IR
Incident Response+63 905-255-0748 · cybersecurity@resono.com.au
PS
Physical Security+63 953-652-5777 · aireen@resono.com.au
SV
SupervisorYour Department Supervisor Contact · Your Department Supervisor Email
IT
IT Service Desk+63 905-255-0748 · cybersecurity@resono.com.au
0 of 4 tickets dispatchedCorrect routing unlocks the next ticket.

RESPONSE TIMELINE

Put the 4 steps in the right order.

A strange page asked for your company password. You did not type anything. Choose the 4 steps in order.

BUILD THE RESPONSE0 of 4 steps placed
1FirstChoose the first action
2ThenChoose the next action
3NextChoose the next action
4FinallyChoose the final action

Choose what you should do next.

Start with what you should do first.Wrong choices can be retried immediately.

INCIDENT REPORT BUILDER

Build a simple incident report.

SCENARIOA login approval appears at 2:10 PM even though you did not try to sign in.

It appears on your work laptop. You did not start the login, you did not approve it, and you stopped.

Choose 4 facts: what happened, when, where, and what you did. No guesses. No passwords.

▤
DRAFT INCIDENT REPORT0 of 4 facts selected
01 WHAT HAPPENED
02 WHEN
03 WHERE
04 WHAT I DID

WAR ROOM MISSION

Handle one incident step by step.

Make 5 safe choices. Remember: stop, do not fix it yourself, report it, and follow instructions.

PRACTICE INCIDENTStage 1 of 5
0 of 5 stages secured
STAGE 1 · WARNING SIGN

Files suddenly change names and an unfamiliar warning appears.

Quiz10 short questions.

FINAL CHECK

What would you do?

Answer 10 short situations. Pick the safest action. You need 8 out of 10 to pass.

Question 1 of 100 of 10 answered

Choose one answer.

✓

TRAINING COMPLETE

You know what to do.

0/10Post-test score
00:00Active learning time
—Date completed
Preparing the response record…
YOUR TAKEAWAY

Remember: STOP. DON’T FIX IT. REPORT IT. FOLLOW INSTRUCTIONS.

Keep your completion record if your supervisor asks for it.