What to do when something looks wrong

Speed matters more than certainty. If something feels off, a suspicious email already clicked, a device behaving strangely, a password possibly exposed, report it immediately rather than waiting to be sure.

Why reporting fast matters

Many incidents can be contained if caught within the first few minutes or hours, an account can be locked, a device can be isolated from the network, a payment can potentially be recalled. That window closes fast, and it closes faster the longer someone hesitates out of embarrassment or uncertainty.

There should be no penalty for reporting

Organisations with a genuinely strong security culture treat reporting a mistake as the correct action, not a confession. Punishing people for reporting incidents just teaches everyone to hide the next one for longer, which is worse for everyone.