1. Passwords, Phishing and Social Engineering

Passwords

• Use a passphrase of at least 12 characters, unique to work systems.
• Never share your POS or system login, including with supervisors or IT.
• Log out or lock the screen when you step away.

Phishing

Signs of a phishing message:

• Urgency: “Your account will be locked today.”
• A request for your password, a code or payment.
• A sender address or link that does not match the company domain.

Do not click, do not reply. Report it to IT through the service desk.

Social engineering in stores

• A caller claiming to be from IT or head office asks for a login or to install software.
• A visitor claims to be a technician and asks for access to the back office or POS.

Verify identity with your Store Manager before giving any access. Genuine technicians have a work order registered by IT.