Action Sequencing: Worksheet 2 - Beginner Practice Action Sequencing BEGINNER

Statement: A cyberattack has breached the servers of a major bank, compromising customer data. The attack is ongoing. Course of Action (Actions must be sequenced in order of priority): I. Isolate affected servers to prevent further data exfiltration. II. Notify affected customers and regulatory authorities about the breach. III. Initiate forensic investigation to determine the scope and method of attack. IV. Implement immediate security patches and firewall rule changes. V. Engage cybersecurity experts for long-term security architecture review.

Statement: A building collapse has occurred in a densely populated area. Many people are feared trapped under debris. Rescue teams are arriving at the scene. Course of Action (Actions must be sequenced in order of priority): I. Conduct primary search and rescue operations to locate and extract trapped victims. II. Set up temporary medical camps and coordinate with nearby hospitals for emergency care. III. Establish a perimeter and crowd control to prevent interference with rescue operations. IV. Launch a structural assessment to prevent secondary collapse and ensure rescuer safety. V. Begin documentation and investigation for legal and insurance purposes.

Statement: A flash flood has severely damaged a critical, elevated section of the main highway connecting a major port city to the interior, halting all logistics traffic. There are fears of stranded motorists and immediate commodity shortages. Course of Action (Actions must be sequenced in order of priority): I. Deploy search and rescue teams (air/ground) to sweep the damaged highway section for stranded victims. II. Immediately divert all inbound and outbound traffic to the secondary, smaller alternative route and impose temporary weight restrictions. III. Commission a high-priority engineering assessment to determine the full extent of the structural damage and timeline for permanent repair. IV. Establish temporary relief camps and medical aid stations near the start of the bottleneck for stranded travelers and immediate medical needs. V. Initiate emergency procurement of heavy equipment and materials for medium-term highway stabilization and temporary bridge construction.

Statement: A flash flood has severely damaged a critical, elevated section of the main highway connecting a major port city to the interior, halting all logistics traffic. There are fears of stranded motorists and immediate commodity shortages. Course of Action (Actions must be sequenced in order of priority): I. Deploy search and rescue teams (air/ground) to sweep the damaged highway section for stranded victims. II. Immediately divert all inbound and outbound traffic to the secondary, smaller alternative route and impose temporary weight restrictions. III. Commission a high-priority engineering assessment to determine the full extent of the structural damage and timeline for permanent repair. IV. Establish temporary relief camps and medical aid stations near the start of the bottleneck for stranded travelers and immediate medical needs. V. Initiate emergency procurement of heavy equipment and materials for medium-term highway stabilization and temporary bridge construction.

Statement: A cyberattack has breached the servers of a major bank, compromising customer data. The attack is ongoing. Course of Action (Actions must be sequenced in order of priority): I. Isolate affected servers to prevent further data exfiltration. II. Notify affected customers and regulatory authorities about the breach. III. Initiate forensic investigation to determine the scope and method of attack. IV. Implement immediate security patches and firewall rule changes. V. Engage cybersecurity experts for long-term security architecture review.

Statement: A building collapse has occurred in a densely populated area. Many people are feared trapped under debris. Rescue teams are arriving at the scene. Course of Action (Actions must be sequenced in order of priority): I. Conduct primary search and rescue operations to locate and extract trapped victims. II. Set up temporary medical camps and coordinate with nearby hospitals for emergency care. III. Establish a perimeter and crowd control to prevent interference with rescue operations. IV. Launch a structural assessment to prevent secondary collapse and ensure rescuer safety. V. Begin documentation and investigation for legal and insurance purposes.

Statement: A flash flood has severely damaged a critical, elevated section of the main highway connecting a major port city to the interior, halting all logistics traffic. There are fears of stranded motorists and immediate commodity shortages. Course of Action (Actions must be sequenced in order of priority): I. Deploy search and rescue teams (air/ground) to sweep the damaged highway section for stranded victims. II. Immediately divert all inbound and outbound traffic to the secondary, smaller alternative route and impose temporary weight restrictions. III. Commission a high-priority engineering assessment to determine the full extent of the structural damage and timeline for permanent repair. IV. Establish temporary relief camps and medical aid stations near the start of the bottleneck for stranded travelers and immediate medical needs. V. Initiate emergency procurement of heavy equipment and materials for medium-term highway stabilization and temporary bridge construction.

Statement: A flash flood has severely damaged a critical, elevated section of the main highway connecting a major port city to the interior, halting all logistics traffic. There are fears of stranded motorists and immediate commodity shortages. Course of Action (Actions must be sequenced in order of priority): I. Deploy search and rescue teams (air/ground) to sweep the damaged highway section for stranded victims. II. Immediately divert all inbound and outbound traffic to the secondary, smaller alternative route and impose temporary weight restrictions. III. Commission a high-priority engineering assessment to determine the full extent of the structural damage and timeline for permanent repair. IV. Establish temporary relief camps and medical aid stations near the start of the bottleneck for stranded travelers and immediate medical needs. V. Initiate emergency procurement of heavy equipment and materials for medium-term highway stabilization and temporary bridge construction.

Statement: A flash flood has severely damaged a critical, elevated section of the main highway connecting a major port city to the interior, halting all logistics traffic. There are fears of stranded motorists and immediate commodity shortages. Course of Action (Actions must be sequenced in order of priority): I. Deploy search and rescue teams (air/ground) to sweep the damaged highway section for stranded victims. II. Immediately divert all inbound and outbound traffic to the secondary, smaller alternative route and impose temporary weight restrictions. III. Commission a high-priority engineering assessment to determine the full extent of the structural damage and timeline for permanent repair. IV. Establish temporary relief camps and medical aid stations near the start of the bottleneck for stranded travelers and immediate medical needs. V. Initiate emergency procurement of heavy equipment and materials for medium-term highway stabilization and temporary bridge construction.

Statement: A building collapse has occurred in a densely populated area. Many people are feared trapped under debris. Rescue teams are arriving at the scene. Course of Action (Actions must be sequenced in order of priority): I. Conduct primary search and rescue operations to locate and extract trapped victims. II. Set up temporary medical camps and coordinate with nearby hospitals for emergency care. III. Establish a perimeter and crowd control to prevent interference with rescue operations. IV. Launch a structural assessment to prevent secondary collapse and ensure rescuer safety. V. Begin documentation and investigation for legal and insurance purposes.

Statement: A flash flood has severely damaged a critical, elevated section of the main highway connecting a major port city to the interior, halting all logistics traffic. There are fears of stranded motorists and immediate commodity shortages. Course of Action (Actions must be sequenced in order of priority): I. Deploy search and rescue teams (air/ground) to sweep the damaged highway section for stranded victims. II. Immediately divert all inbound and outbound traffic to the secondary, smaller alternative route and impose temporary weight restrictions. III. Commission a high-priority engineering assessment to determine the full extent of the structural damage and timeline for permanent repair. IV. Establish temporary relief camps and medical aid stations near the start of the bottleneck for stranded travelers and immediate medical needs. V. Initiate emergency procurement of heavy equipment and materials for medium-term highway stabilization and temporary bridge construction.

Statement: A cyberattack has breached the servers of a major bank, compromising customer data. The attack is ongoing. Course of Action (Actions must be sequenced in order of priority): I. Isolate affected servers to prevent further data exfiltration. II. Notify affected customers and regulatory authorities about the breach. III. Initiate forensic investigation to determine the scope and method of attack. IV. Implement immediate security patches and firewall rule changes. V. Engage cybersecurity experts for long-term security architecture review.

Statement: A cyberattack has breached the servers of a major bank, compromising customer data. The attack is ongoing. Course of Action (Actions must be sequenced in order of priority): I. Isolate affected servers to prevent further data exfiltration. II. Notify affected customers and regulatory authorities about the breach. III. Initiate forensic investigation to determine the scope and method of attack. IV. Implement immediate security patches and firewall rule changes. V. Engage cybersecurity experts for long-term security architecture review.

Statement: A cyberattack has breached the servers of a major bank, compromising customer data. The attack is ongoing. Course of Action (Actions must be sequenced in order of priority): I. Isolate affected servers to prevent further data exfiltration. II. Notify affected customers and regulatory authorities about the breach. III. Initiate forensic investigation to determine the scope and method of attack. IV. Implement immediate security patches and firewall rule changes. V. Engage cybersecurity experts for long-term security architecture review.

Statement: A flash flood has severely damaged a critical, elevated section of the main highway connecting a major port city to the interior, halting all logistics traffic. There are fears of stranded motorists and immediate commodity shortages. Course of Action (Actions must be sequenced in order of priority): I. Deploy search and rescue teams (air/ground) to sweep the damaged highway section for stranded victims. II. Immediately divert all inbound and outbound traffic to the secondary, smaller alternative route and impose temporary weight restrictions. III. Commission a high-priority engineering assessment to determine the full extent of the structural damage and timeline for permanent repair. IV. Establish temporary relief camps and medical aid stations near the start of the bottleneck for stranded travelers and immediate medical needs. V. Initiate emergency procurement of heavy equipment and materials for medium-term highway stabilization and temporary bridge construction.

Statement: A cyberattack has breached the servers of a major bank, compromising customer data. The attack is ongoing. Course of Action (Actions must be sequenced in order of priority): I. Isolate affected servers to prevent further data exfiltration. II. Notify affected customers and regulatory authorities about the breach. III. Initiate forensic investigation to determine the scope and method of attack. IV. Implement immediate security patches and firewall rule changes. V. Engage cybersecurity experts for long-term security architecture review.

Statement: A cyberattack has breached the servers of a major bank, compromising customer data. The attack is ongoing. Course of Action (Actions must be sequenced in order of priority): I. Isolate affected servers to prevent further data exfiltration. II. Notify affected customers and regulatory authorities about the breach. III. Initiate forensic investigation to determine the scope and method of attack. IV. Implement immediate security patches and firewall rule changes. V. Engage cybersecurity experts for long-term security architecture review.

Statement: A cyberattack has breached the servers of a major bank, compromising customer data. The attack is ongoing. Course of Action (Actions must be sequenced in order of priority): I. Isolate affected servers to prevent further data exfiltration. II. Notify affected customers and regulatory authorities about the breach. III. Initiate forensic investigation to determine the scope and method of attack. IV. Implement immediate security patches and firewall rule changes. V. Engage cybersecurity experts for long-term security architecture review.

Statement: A building collapse has occurred in a densely populated area. Many people are feared trapped under debris. Rescue teams are arriving at the scene. Course of Action (Actions must be sequenced in order of priority): I. Conduct primary search and rescue operations to locate and extract trapped victims. II. Set up temporary medical camps and coordinate with nearby hospitals for emergency care. III. Establish a perimeter and crowd control to prevent interference with rescue operations. IV. Launch a structural assessment to prevent secondary collapse and ensure rescuer safety. V. Begin documentation and investigation for legal and insurance purposes.

Statement: A cyberattack has breached the servers of a major bank, compromising customer data. The attack is ongoing. Course of Action (Actions must be sequenced in order of priority): I. Isolate affected servers to prevent further data exfiltration. II. Notify affected customers and regulatory authorities about the breach. III. Initiate forensic investigation to determine the scope and method of attack. IV. Implement immediate security patches and firewall rule changes. V. Engage cybersecurity experts for long-term security architecture review.