Which step should occur after notifying your supervisor about a security incident?

Which step should occur after notifying your supervisor about a security incident?

• A. Secure the scene
• B. Prepare the formal report
• C. Notify authorities
• D. Log details

Answer: (D)

When handling a security incident, capturing an official, time-stamped record of what happened is essential. After you’ve informed your supervisor, the next step is to log the incident details. This means recording who reported it, the exact time and location, what was observed, which systems or assets were affected, actions already taken, and any evidence collected or available. Having this detailed log creates an auditable trail that supports investigations, helps coordinate the response, and provides a solid foundation for later steps like formal reporting or notifying authorities. While securing the scene and escalating to authorities or filing a formal report are important parts of the overall process, logging the details immediately after notification ensures accurate information is preserved before further actions occur.