Security tips

Keep your workspace (or meeting room) tidy.
Put data carriers in a drawer or cabinet that you can lock or dispose them in the right way (shredder, locked basket).
Fully shut down all equipment before leaving the office to prevent losing information.
Always take your personal belongings with you.
Only share confidential business information or files through secured channels.
Be aware with who you share information.
Check the content and recipient(s) of the emails before sending them.
Prevent others from seeing confidential information on your screen.

Keep your mobile equipment with you.
Never leave your equipment unguarded.
Lock your computer when you leave your workspace.
Use covers, cases and skins to protect your equipment.
Your pass, passwords, pincodes and key are only destined for you, so don’t lend them to others.
Protect your equipment with a password, pincode or biometrical info and use multi-factor authentication where possible.
Ensure your computer and applications are updated at the earliest convenience.
Protect your email with 2FA / MFA. Password reset requests from many services end up in your email. Access to your email means access to a lot of services.

Communication (and information sharing) can take place in spoken or written form.
Be careful about what you share, who you share information with and how you do it.
Take into account the nature of your conversation and provide a suitable environment; don't have a confidential conversation in a public place.
Only discuss business and/or confidential matters in a separate room or move the meeting to a more convenient location.
Always take your personal belongings with you.
Only share information when strictly necessary, both inside and outside the organization.

Use e-mail and the internet responsibly.
Only use trusted sites to download documents and other files.
Be aware of data classification and how to handle data before sending confidential/sensitive information.
Check if emails come from trusted email addresses.
Handle e-mails and attachments of unknown origin with care.
Try to reach the mentioned service and website via internet instead of directly through the link in the email or text.
Flag emails with potential threats and notify your IT/Security Department.
Do not post sensitive information about the organization or customers on social media.
Keep work and private life separate. For example, use one social media channel for private purposes only, and the other for business purposes.

Set a PIN or password on your device, including your voicemail.
Lock your device when not in use.
Follow organization guidelines when storing and editing information.
Always keep mobile devices in sight and never leave them in the car, including in the trunk.
Only use secure networks and encrypt information when you're on the go.

Notify the reception of visitors.
Accompany your visitors and make sure that any visitor passes are visibly worn.
Wear your access pass visibly.
Watch out for unknown visitors, people walking around alone and/or suspicious people without an access pass. Ask if you can take them to the reception or their contact person.

Don’t give out passwords by phone – not even to Exact
Never give your password to someone else! To nobody, not even to a colleague.
Never talk about a password near others.
Don’t give hints about the structure of your password (for example ‘my surname’).
Don’t share a password, not even to a colleague or family member.
Never give your password to colleagues during holiday.
If someone asks for a password, refer them to these password tips and tricks.
Don’t use the function ‘Remember password’ within applications and browsers – use a password manager instead.
Change your password if you are notified that your account or password have possibly been leaked.
Change your password regularly.
Enable 2FA / MFA were possible. 2FA is a specific type of multi-factor authentication (MFA) that strengthens access security by requiring two methods (also referred to as authentication factors) to verify your identity.
Never use the same password for multiple accounts. Make passwords unique.