COMPTECH IT SOLUTIONS
Education cyber awareness staff pack | Version 2026.10

Clicked a link or entered a password?

Report quickly, even if you are unsure. An early report helps protect colleagues and information. You do not need to investigate first.

Stop interacting with the message or page. Do not approve unexpected MFA prompts or enter more information.

Use the approved incident route from a safe device. If normal systems are unavailable, use your alternative contact card.

Tell the response team when it happened, the account/device involved and whether you entered a password, approved MFA, downloaded a file or shared information. Never send them your password or one-time code.

If credentials were entered, change the affected password through the approved service or follow the response team’s instructions. A password reset alone may not end active sessions.

If a file ran, a device behaves unusually or a ransom demand appears, stop using it and follow your approved isolation instructions. Do not wipe, privately repair, negotiate or pay.

Preserve the message or relevant details using the approved reporting method. Do not forward sensitive files widely or revisit the suspicious link.

Where pupil information, safeguarding access or safety may be affected, also follow the school’s data and safeguarding reporting arrangements.

Record the incident reference and follow-up action. Report mistakes without blame; use the learning to improve controls.

Free to adapt for internal staff training. Check your organisation’s procedures before use.
Source: https://www.comptechits.co.uk/education/cyber-security-training/resources/