Security & Privacy at Work: A Practical Guide for Every Employee

A short teaching session that grounds every learner in why security and privacy are everyone's job — not just IT's. Covers the real business, legal, and personal consequences of getting it wrong, and the small, everyday choices that keep customer data and company information safe.

A practical guide to how information moves through your workday — classifying it, sharing it appropriately, keeping only what's needed, and disposing of it safely. Includes quick judgment checkpoints on realistic data-handling situations.

You play a customer service rep taking a call from a frustrated customer who wants to see everything the company has on them. Practice verifying identity, scoping the request, handling pressure, and setting realistic expectations — without disclosing anything you shouldn't.

It's Thursday afternoon and a message from "Sam Chen, executive assistant to the CFO" hits your work chat. Warm, polite, urgent. A deal is closing. A wire needs to go out now. Later, an "IT" contact asks you to approve a security push on your phone. Practice spotting the pattern, verifying through a channel you already trust, and refusing to be rushed.

Home offices, hotel lobbies, airport lounges, and shared coworking spaces have made your workplace a moving target. This lesson covers device hygiene, network safety, screen locking, and the small habits that keep work information out of the wrong hands wherever you are.

A two-part physical security scenario. In the morning, a friendly stranger at the coffee shop next to you gets curious about your screen. In the afternoon, someone with arms full of coffees tries to follow you through the badge-controlled door. Practice polite firmness — you can be nice AND not overshare, nice AND not let a stranger through the door.

You clicked a phishing link and entered your credentials before you realized. Ten minutes later, you're on the phone with Dana Wu from security operations. Practice the moves that matter most in the moments after a mistake: report clearly, stop working on the affected machine, disconnect it, change credentials from a different device, cooperate with the handover — without hiding, blaming, or trying to clean up first.

You have a great 40-minute customer call transcript and a summary due to your manager tonight. A free public AI tool would do it in 30 seconds. Before you paste, you ping Priya Patel, your security architect, to think it through together. Practice making a good third-party decision under time pressure — without treating "delete the chat after" or "just this once" as the actual mitigation.