Sample Instructions Incident Response

Sample Instructions Incident Response
Documentation by Martin Eesmaa and his three team members.
Licensed on CC-BY-SA 4.0 and dated on 20.02.2026.

Theory answers.

1. Biometric scanner and CCTV (Closed Circuit TeleVision) cameras
2. Failed to stop the suspicious person and didn't report badge loss.
3:
One to three attempted fails will trigger alarm motion
Badge should be disabled by default after an hour grace (after business hours time)
When the badge is lost, then it should need to report to security team immediately as possible
and should penalize if failed to alert and may put in a court if it's serious.

TIP: Improve the training experiences