Passwords & Access
You must never share this with anyone, not even IT support.
What is your password?
Users must take every precaution to prevent company devices from being this
What is stolen?
This type of connection should never be used for work without a company-approved VPN
What is public/unsecured WiFi?
This must be signed and followed by all employees to maintain digital safety.
What is the Code of Conduct for Digital Protection (DS_GC01)?
The act of using another employee's credentials or circumventing controls to access information you are not authorized to see.
What is a violation of access control?
Users must not do this to the device's security settings (e.g., firewall, encryption) configured by IT services.
What is circumvent/change?
This type of information about work should never be posted on social media
What is confidential/sensitive information?
This, according to Rule 9, must never be attempted: bypassing security to gain information you are not authorized to see
What is unauthorized access/covert means?
This extra layer of security should be activated whenever available to protect accounts.
What is two-factor or multi-factor authentication (2FA/MFA)?
Only approved software, as defined in this policy, should be used on company machines
What is the Information Security Policy?
Clicking on links or attachments from these sources can lead to a cyber incident
What are unknown or suspicious emails?
This is the primary team responsible for maintaining security, but all employees have a responsibility to act safely.
What is IT Services (CSIRT)?
This action should be taken immediately upon stepping away from your desk to prevent unauthorized access.
Regularly doing this allows computers to receive the latest security updates and patches
What is restarting your computer/updating?
Use only these types of approved platforms to share or store company data
What are company-approved third-party solutions?
Using these on public Wi-Fi is mandatory to ensure a secure connection to Air Liquide resources.
What is a VPN (Virtual Private Network)?
This must be activated on all accounts that support it to prevent unauthorized login, even if a password is stolen.
What is Multi-Factor Authentication (MFA)?
These devices, including USB drives, should not be plugged into Air Liquide equipment unless verified and approved.
What are unauthorized external devices/peripherals?
This is the maximum time personal data should be kept, according to Data Protection policy.
What is a limited period of time?
This "by Design" principle means security and privacy must be considered at the start of every project
What is Security/Privacy by Design?
According to the Code of Conduct, this is the ultimate goal of all 12 digital protection rules: protecting the company's ______, people, and reputation.
What are Digital Assets/Resources?