Safe and Responsible Use of IT
Policies and acceptable use
Organisations publish acceptable use policies, password policies, data-handling rules, and social-media guidelines. Following them is part of professional responsibility. Know that work devices and accounts may be monitored, and that personal use may be restricted. Software licensing matters: using unlicensed software is both a legal and a security risk (no updates, possible malware).
Safe daily habits
Keep operating systems and applications patched; enable automatic updates. Lock your screen when leaving a device. Avoid installing unknown software or plugging in found USB drives. Verify before sharing sensitive data - check the recipient and use secure channels. Be careful with oversharing on social media, which feeds social engineering and reveals answers to security questions. Use privacy settings and limit what apps may access.
Incidents, backup, and disposal
Report suspected incidents (lost device, suspicious email, possible breach) immediately to the designated contact - speed limits damage. Follow the organisation's incident-response process rather than improvising. Maintain backups and know how to restore them. When disposing of equipment, securely erase or physically destroy storage; simple deletion or formatting is insufficient. Shred confidential paper.
Traps and a rule of thumb
Common traps: assuming a locked screen is unnecessary at home; thinking deleting files securely wipes a disk; believing reporting a mistake will only cause trouble (delayed reporting worsens harm); and ignoring licence terms for "free" downloads. Remember that BYOD (bring your own device) blurs personal and work data, so follow the policy on encryption and access.
Rule of thumb: adopt the "stop, check, report" habit - stop before clicking or sharing, check the request against policy and a trusted channel, and report anything suspicious promptly, even if you are unsure.