Security · 4 guides
Protect work data
Blocked USB sticks, firewall denials, encrypting a file, and password requests.
A USB drive is blocked or I cannot copy files to it
Windows refuses a thumb drive, or files copy and then vanish because of policy.
You might notice
- Access denied on removable media
- Device is blocked by policy
- Only company-encrypted sticks work
- 01
Assume storage sticks are restricted
Many companies allow USB keyboards and mice but block storage. That is intentional.
- 02
Use an approved encrypted drive if you must
If IT issues IronKey-style devices, use those and the official unlock app. Personal sticks are often denied.
- 03
Prefer OneDrive links over copies
Sharing a link keeps audit history and avoids lost sticks. For vendors, use the approved external-share process.
Did this get you unstuck?
A website is blocked by the company firewall
The browser shows an access denied or category blocked page for a site you need.
You might notice
- Access denied by policy
- The site works on your phone’s cellular data
- Only one vendor site fails
- 01
Read the block page
It usually lists a category such as “uncategorized,” “file sharing,” or “newly registered.” That is what IT will review.
- 02
Confirm you need it for work
Personal shopping, streaming, and risky file hosts will stay blocked. A vendor documentation site is a reasonable request.
- 03
Submit an unblock request
Use the link on the block page or a ticket. Include the full URL, who asked you to use it, and whether it must be available off VPN too.
- 04
Do not use a personal VPN to bypass it
That violates policy and often breaks other work apps. Wait for the exception.
Did this get you unstuck?
How to protect a sensitive file before sending it
Share payroll, HR, or customer data without dropping an unprotected copy into email.
You might notice
- You need to send personal data
- A policy tip blocked the mail
- A vendor asked for an encrypted attachment
- 01
Keep it in a controlled library
Store the file in the approved SharePoint or Teams site, not on the desktop. Apply the sensitivity label your company provides, such as Confidential.
- 02
Share a restricted link
Grant specific people view access and set an expiration. Avoid “anyone with the link.”
- 03
If email is required, follow the prompt
Encrypt-only or Do not forward options in Outlook use company rights management. Do not invent a zip password and send the password in the same thread.
- 04
Minimize the data
Send the columns or pages that are needed, not the whole export. Delete local copies you no longer need.
Did this get you unstuck?
Someone asked me for my password
A caller, chat, or email claims to be IT and wants your password or an MFA code.
You might notice
- A “help desk” chat asks you to read a code
- A vendor wants your work login
- A coworker asks to borrow your account
- 01
Do not give it
IT, finance, and vendors never need your password. Real IT can reset access without you reading it aloud.
- 02
Do not approve an MFA prompt you did not start
Deny it. An unexpected prompt means someone already has or is guessing your password.
- 03
Hang up and use a known number
Call the service desk using the number on the intranet or the back of your badge, not the number the caller gave you.
- 04
Report the attempt
Send security the chat, email, or callback number. These attempts are often part of a wider campaign.
