Skip to content
Security,AppliedContact the desk
Browse sectionsAct NowAccounts & IdentityDevices & DataSmall TeamsField NotesSecurity Action Index

Version 0.1 ยท reviewed August 23, 2026

Security Action Index

The Security Action Index routes a symptom to safe first actions, evidence cautions, and escalation triggers. Start with the situation you can observe. The index is a guide for choosing a sensible first route, not automated diagnosis.

A documentary still life representing cybersecurity incident first steps

Respond

Can a Plugged-In Device Read Your Memory?

First move
Pause, record the basics, and use a trusted route.
Preserve
Time, messages, notices, settings, and relevant account details.
Escalate
Provider, bank, employer, or specialist if recovery is blocked or impact grows.

Respond

Hacked account first steps

First move
Pause, record the basics, and use a trusted route.
Preserve
Time, messages, notices, settings, and relevant account details.
Escalate
Provider, bank, employer, or specialist if recovery is blocked or impact grows.

Respond

What to do after clicking a phishing link

First move
Pause, record the basics, and use a trusted route.
Preserve
Time, messages, notices, settings, and relevant account details.
Escalate
Provider, bank, employer, or specialist if recovery is blocked or impact grows.

Respond

Ransomware first response checklist

First move
Pause, record the basics, and use a trusted route.
Preserve
Time, messages, notices, settings, and relevant account details.
Escalate
Provider, bank, employer, or specialist if recovery is blocked or impact grows.

Harden

Lost or stolen phone security steps

First move
Pause, record the basics, and use a trusted route.
Preserve
Time, messages, notices, settings, and relevant account details.
Escalate
Provider, bank, employer, or specialist if recovery is blocked or impact grows.

Harden

Password manager basics

First move
Pause, record the basics, and use a trusted route.
Preserve
Time, messages, notices, settings, and relevant account details.
Escalate
Provider, bank, employer, or specialist if recovery is blocked or impact grows.

Harden

MFA methods compared

First move
Pause, record the basics, and use a trusted route.
Preserve
Time, messages, notices, settings, and relevant account details.
Escalate
Provider, bank, employer, or specialist if recovery is blocked or impact grows.

Harden

Passkeys explained

First move
Pause, record the basics, and use a trusted route.
Preserve
Time, messages, notices, settings, and relevant account details.
Escalate
Provider, bank, employer, or specialist if recovery is blocked or impact grows.

Each route is maintained with a source trace and review date. See how the index is updated.

When the suspicious event is physical rather than a message, a device plugged into a port you did not choose, start with a device that can read memory and the same record-first habit.

Further afield