Nobody gets everything right all the time.
You may accidentally click a suspicious link, send an email to the wrong person, open an unexpected attachment, share information with the wrong recipient, or approve something you did not intend to.
Making a mistake does not automatically mean there is a security incident.
What you do immediately afterwards can make the difference.
Why Reporting Quickly Matters
When a security mistake is reported early, IT can take action to reduce the impact.
For example, IT may be able to:
- Block a suspicious link or sender.
- Secure or reset a compromised account.
- Remove access to incorrectly shared information.
- Check whether sensitive information was accessed.
- Isolate a device if it may be compromised.
- Prevent the same incident from affecting other users.
Waiting gives an attacker more time to take advantage of the situation.
What Should You Report?
Report it when you:
- Clicked a link that you now believe may be suspicious.
- Entered your password on a website you are unsure about.
- Opened an unexpected attachment.
- Sent confidential information to the wrong person.
- Accidentally shared a file with the wrong recipient.
- Approved an unexpected login or authentication request.
- Lost or misplaced a company device.
- Notice unusual activity on your account or computer.
Even if you are not sure it is a security incident, report it.
It is better to report something that turns out to be harmless than to stay silent about something that could become serious.
What Not to Do
Don’t:
- Hide the mistake.
- Delete evidence or messages before reporting.
- Continue interacting with a suspicious sender.
- Assume the problem will resolve itself.
- Wait until someone else discovers it.
Common Thinking to Avoid
I’ll deal with it if something happens.
It’s probably nothing.
I don’t want to get into trouble.
Someone else will probably report it.
These reactions can give a security incident more time to develop.
Final Reminder
Security is not about never making a mistake.
It is about recognizing when something may have gone wrong and taking the right action quickly.
If you make a mistake, don’t panic and don’t hide it.
Stop. Report. Let IT help.
Your quick action could prevent a small mistake from becoming a major security incident.
🔐 CyberDesk – Protecting Our Digital Workplace
