Make a safer next move
Practical cybersecurity guidance for everyday work, from messages and sign-ins to sharing information.
This fictional example follows Northstar Works, a cross-functional organization. Start with the topic that matches your situation; if a work account, device, or information may be at risk, use your organization's approved urgent help route.
Pause, check, then act
If a request or sign-in feels unexpected, pause before clicking, replying, approving, or sharing. Verify through a work channel you already trust, never send passwords or authentication codes, and use the approved help route if something may already have happened.
Choose a topic
Open the page that best matches the decision in front of you.
A small check can prevent a bigger detour
A fictional Northstar Works scenario shows how these decisions connect.
A request arrives out of context
A project coordinator receives a message asking for a full planning file before a meeting. The sender name looks familiar, but the request does not match the team's usual workflow.
- Pause instead of opening the attachment or forwarding the file.
- Check with the colleague through a known work channel.
Share only what the work needs
After verifying the meeting request, the coordinator shares a short summary with the named collaborators rather than sending the full file to a broad, unverified audience.
- Confirm who needs the information.
- Use an approved method for the information and audience.
Who does what
Role descriptions are illustrative, not a directory of assigned staff.
Every employee: pause when something is unexpected, protect sign-in details, limit sharing to the intended audience, and raise concerns through approved routes.
IT support: helps with workplace technology and account or device questions through the organization's established support channels.
Security specialists: assess suspected security concerns and advise through the organization's designated security process. Use the approved urgent route when an issue may be time-sensitive.
IT and Security owns this fictional guide. Follow the organization's established route to ask a question or flag a correction.