Which is a correct sequence for reporting a security incident?

• A. Wait for someone to notice.
• B. Secure the scene and follow-up after immediate action.
• C. Prepare a formal report after logging details.
• D. Immediate notification to supervisor, log details, collect evidence, prepare a formal report, notify authorities if necessary, secure the scene, follow-up.

Answer: (D)

A structured incident reporting workflow that emphasizes immediate escalation and preserving evidence is essential. Notify a supervisor right away to activate the incident response process, ensuring the right authority is engaged without delay. As you respond, log details—what happened, when, who was involved, and what actions were taken—to create a reliable, time-stamped record. Collect evidence carefully to maintain its integrity and support later investigation. Then prepare a formal report that combines the facts, actions, and outcomes into an official document. If policy or law requires it, notify the appropriate authorities. Secure the scene to prevent further damage or interference with evidence. Finally, follow up to review remediation, updates, and lessons learned. Delays or skipping steps like logging, evidence collection, or escalation can compromise safety, investigation integrity, and compliance.