Which step should occur after notifying your supervisor about a security incident?

Which step should occur after notifying your supervisor about a security incident?

• A. Secure the scene
• B. Prepare the formal report
• C. Notify authorities
• D. Log details

Answer: (D)

Documenting the incident with a detailed, time-stamped record is the next essential step. Once you’ve informed your supervisor, you need to capture what happened, when it occurred, which systems or data were affected, who was involved, and what actions have been taken so far. This log creates a reliable audit trail that every part of the response can reference, supports the investigation, and provides the necessary information for formal reporting or escalation to authorities if required. Without a solid log, later containment, remediation, and any legal or compliance requirements can become guesswork or incomplete.

Documenting the incident with a detailed, time-stamped record is the next essential step. Once you’ve informed your supervisor, you need to capture what happened, when it occurred, which systems or data were affected, who was involved, and what actions have been taken so far. This log creates a reliable audit trail that every part of the response can reference, supports the investigation, and provides the necessary information for formal reporting or escalation to authorities if required. Without a solid log, later containment, remediation, and any legal or compliance requirements can become guesswork or incomplete.