If you observe a security violation, what should you do?

• A. Report it promptly according to policy.
• B. Ignore it unless it involves a loss.
• C. Document it in a personal log for later review.
• D. Discuss it only with peers.

Answer: (A)

The main idea is to follow the established incident reporting procedures immediately. Reporting promptly according to policy ensures the right people are alerted, the incident is documented, and appropriate containment and corrective actions can begin without delay. It also helps preserve evidence, maintain a proper chain of custody, and protect personnel and sensitive information. By using the designated channels—such as your supervisor, security office, or the official incident reporting system—you support consistent, accountable handling across the organization. Delaying, ignoring, keeping a personal log, or discussing the issue only with peers can bypass the official response, risk confidentiality, and allow the violation to continue or worsen. So the best action is to report it promptly through the approved policy.