Only access what you need, keep systems locked, and follow client security rules.
Client details, pricing, customer data and internal documents are all confidential.
Use strong, unique passwords and never share them.
Always keep multi-factor authentication switched on.
Keep client data inside approved client systems only.
Share files only through approved tools and with authorised people.
Don't store client files on personal devices unless explicitly approved.
Don't screenshot or record client information without permission.
Avoid public Wi-Fi for work. If you must, use an approved secure connection.
Be cautious with unexpected links, attachments or urgent money requests.
Don't click, report it to your client and support lead.
Report anything unusual immediately. Fast reporting limits damage.