Security · 4 guides

Protect work data

Blocked USB sticks, firewall denials, encrypting a file, and password requests.

A USB drive is blocked or I cannot copy files to it

Windows refuses a thumb drive, or files copy and then vanish because of policy.

You might notice

  • Access denied on removable media
  • Device is blocked by policy
  • Only company-encrypted sticks work
  1. 01

    Assume storage sticks are restricted

    Many companies allow USB keyboards and mice but block storage. That is intentional.

  2. 02

    Use an approved encrypted drive if you must

    If IT issues IronKey-style devices, use those and the official unlock app. Personal sticks are often denied.

  3. 03

    Prefer OneDrive links over copies

    Sharing a link keeps audit history and avoids lost sticks. For vendors, use the approved external-share process.

A website is blocked by the company firewall

The browser shows an access denied or category blocked page for a site you need.

You might notice

  • Access denied by policy
  • The site works on your phone’s cellular data
  • Only one vendor site fails
  1. 01

    Read the block page

    It usually lists a category such as “uncategorized,” “file sharing,” or “newly registered.” That is what IT will review.

  2. 02

    Confirm you need it for work

    Personal shopping, streaming, and risky file hosts will stay blocked. A vendor documentation site is a reasonable request.

  3. 03

    Submit an unblock request

    Use the link on the block page or a ticket. Include the full URL, who asked you to use it, and whether it must be available off VPN too.

  4. 04

    Do not use a personal VPN to bypass it

    That violates policy and often breaks other work apps. Wait for the exception.

How to protect a sensitive file before sending it

Share payroll, HR, or customer data without dropping an unprotected copy into email.

You might notice

  • You need to send personal data
  • A policy tip blocked the mail
  • A vendor asked for an encrypted attachment
  1. 01

    Keep it in a controlled library

    Store the file in the approved SharePoint or Teams site, not on the desktop. Apply the sensitivity label your company provides, such as Confidential.

  2. 02

    Share a restricted link

    Grant specific people view access and set an expiration. Avoid “anyone with the link.”

  3. 03

    If email is required, follow the prompt

    Encrypt-only or Do not forward options in Outlook use company rights management. Do not invent a zip password and send the password in the same thread.

  4. 04

    Minimize the data

    Send the columns or pages that are needed, not the whole export. Delete local copies you no longer need.

Someone asked me for my password

A caller, chat, or email claims to be IT and wants your password or an MFA code.

You might notice

  • A “help desk” chat asks you to read a code
  • A vendor wants your work login
  • A coworker asks to borrow your account
  1. 01

    Do not give it

    IT, finance, and vendors never need your password. Real IT can reset access without you reading it aloud.

  2. 02

    Do not approve an MFA prompt you did not start

    Deny it. An unexpected prompt means someone already has or is guessing your password.

  3. 03

    Hang up and use a known number

    Call the service desk using the number on the intranet or the back of your badge, not the number the caller gave you.

  4. 04

    Report the attempt

    Send security the chat, email, or callback number. These attempts are often part of a wider campaign.