Angvlar Security Awareness
How and when to report a security concern
Report suspicious activity early, even when you are unsure or already clicked.
Why this matters
Early reporting gives security teams options. Employees should not hide mistakes or wait for certainty; useful reports include what happened, when and what action was taken.
By the end of this lesson
- Recognise the main warning signs
- Choose a safe verification method
- Know when and how to report the situation
What to notice
- Unexpected login or MFA prompt
- Suspicious message or call
- Accidental data sharing
- Lost device
- Malware warning
- Credentials entered on an unusual page
What to do
- Stop further interaction
- Use the approved reporting channel
- State what happened and when
- Mention any links, files or data involved
- Follow containment instructions
- Do not delete evidence unless instructed
Frequently asked questions
Should I report if I am not certain?
Yes. Security teams can assess it.
What if I clicked?
Report promptly and honestly.
Will deleting the message solve the problem?
No; it may remove useful evidence.