Use company networks safely, secure your desk, and report suspicious activity.
Workplace cybersecurity is a shared responsibility. IT departments set the controls, but those controls are only as effective as the employees who work within them. The most expensive security infrastructure cannot prevent an employee from forwarding client data to personal email "for convenience."
Core workplace habits: do not use work devices for personal social media, gaming, or shopping (personal browsing on work devices exposes the corporate network to personal risk). Use only approved tools for work communication — consumer apps like WhatsApp or personal Gmail are not subject to corporate security controls or compliance requirements.
Lock your workstation screen whenever you step away — use Win+L on Windows or the equivalent on other systems. An unlocked computer left unattended is an invitation for a passerby to access files, insert a USB device, or send an email appearing to come from you.
Report suspicious activity immediately without waiting to be certain. Security teams would far rather investigate a false alarm than not know about a real incident. Most organizations have a specific reporting channel — know what it is before you need it.