Reporting and documentation in Cybersecurity - Mini Project: Build & Apply

Creating a Cybersecurity Incident Report

📖 Scenario: You work in a cybersecurity team. Your job is to document incidents clearly and accurately so others can understand what happened and how to fix it.Imagine a recent incident where a phishing email was detected and blocked. You need to create a simple report that captures key details.

🎯 Goal: Build a clear cybersecurity incident report step-by-step. You will create the data, add configuration details, write the main report content, and finalize it for sharing.

📋 What You'll Learn

Create a dictionary with exact incident details

Add a variable for the incident severity level

Write a summary paragraph using the data

Add a final note about next steps

💡 Why This Matters

🌍 Real World

Cybersecurity teams must document incidents clearly so others can understand what happened and how to respond.

💼 Career

Writing clear reports is essential for communication between security analysts, management, and other teams.

1

Create the incident data dictionary

Create a dictionary called incident with these exact entries: 'type': 'Phishing Email', 'detected_by': 'Email Filter', 'action_taken': 'Blocked', 'time': '2024-06-01 10:15'.

Cybersecurity

# Create the incident dictionary with exact keys and values
# Your code here

Need a hint?

Use curly braces to create a dictionary and include all keys exactly as shown.

2

Add the incident severity level

Add a variable called severity and set it to the string 'High'.

Cybersecurity

incident = {
    'type': 'Phishing Email',
    'detected_by': 'Email Filter',
    'action_taken': 'Blocked',
    'time': '2024-06-01 10:15'
}
# Add the severity variable below
# Your code here

Need a hint?

Just create a variable named severity and assign the string 'High'.

3

Write the incident summary paragraph

Create a variable called summary that uses an f-string to combine the incident dictionary values and severity variable into this exact sentence:
"Incident: Phishing Email detected by Email Filter at 2024-06-01 10:15. Action taken: Blocked. Severity level: High."

Cybersecurity

incident = {
    'type': 'Phishing Email',
    'detected_by': 'Email Filter',
    'action_taken': 'Blocked',
    'time': '2024-06-01 10:15'
}
severity = 'High'
# Create the summary string using an f-string below
# Your code here

Need a hint?

Use an f-string with curly braces to insert dictionary values and the severity variable exactly as shown.

4

Add the final next steps note

Create a variable called next_steps and set it to the string 'Review email filter rules and train staff on phishing awareness.'

Cybersecurity

incident = {
    'type': 'Phishing Email',
    'detected_by': 'Email Filter',
    'action_taken': 'Blocked',
    'time': '2024-06-01 10:15'
}
severity = 'High'
summary = f"Incident: {incident['type']} detected by {incident['detected_by']} at {incident['time']}. Action taken: {incident['action_taken']}. Severity level: {severity}."
# Add the next_steps variable below
# Your code here

Need a hint?

Just assign the exact string to the variable next_steps.