Security habits for every workday

This fictional Northstar example is for office and frontline employees across locations. Use these ten habits as a quick reminder; local requirements and approved tools may differ. This page is sample guidance, not confirmed Northstar policy.

Ten practical security rules

Pause when something feels unusual, and use the Service Desk app to ask for help.

  1. 1

    Use a unique password and approved sign-in protections

    Use a different password for each work account. Turn on the sign-in protections provided by your organization; do not use an unapproved tool to store or share passwords.

  2. 2

    Never share passwords or verification codes

    Do not give your password or a one-time verification code to anyone, even if a message or caller claims to be a manager or support staff.

  3. 3

    Lock your device when you step away

    Lock your screen whenever you leave a work device unattended, including during a short break or shift handover.

  4. 4

    Stop if a sign-in prompt is unexpected

    Do not approve an authentication prompt you did not start. Use the Service Desk app to report the unexpected prompt or ask what to do next.

  5. 5

    Check unexpected links and attachments

    Before opening a link or attachment, check whether you expected it and whether the request makes sense. If unsure, verify with the sender using a work contact method you already trust.

  6. 6

    Verify unusual payment or sensitive-data requests

    Before sending money or sensitive work information, confirm the request with the person through a separate, trusted work channel—not by replying to the request itself.

  7. 7

    Share work information only with approved people and tools

    Check the recipient and audience before sharing. Use organization-approved tools, and do not move work information to a personal account or unapproved service.

  8. 8

    Install updates through approved channels

    Apply device and software updates when prompted by your organization or its approved tools. If an update prompt seems suspicious or disrupts work, ask the Service Desk before proceeding.

  9. 9

    Protect devices and papers in shared spaces

    Keep work devices with you or secured when practical. Put away papers containing work information when they are not in use, especially in public or shared areas.

  10. 10

    Report loss, suspected scams, or accidental sharing promptly

    If a device is lost, you may have interacted with a scam, or work information went to the wrong person, contact the Service Desk through its available support or reporting route. Describe what happened and what you did; never include passwords or verification codes.

Need help? Open the Service Desk app

Use the app's available support or reporting route for a security question or concern.

Open the Service Desk app and choose the available route that best matches your question or concern.

Describe what happened, when you noticed it, and any action you took. Do not include passwords or verification codes.

Follow the instructions you receive through the Service Desk.

The correct app route and any urgent-response process must be confirmed by Northstar before this sample is published.

Keep this reference current

Report promptly

Report suspected issues promptly through the Service Desk app and follow the instructions provided there.

A quick reference, not policy

This page is a quick reference, not a substitute for applicable company policies.

Before publishing this fictional example

Northstar's security or policy owner should complete these checks.

  • Validate the wording
  • Confirm the reporting route across locations and roles
  • Set an owner and review trigger—for example, a change to the applicable policy, approved tools, or reporting route