Encryption & Lock Discipline

What Is Encryption & Lock Discipline?

Full disk encryption makes a stolen computer unreadable. Screen locking protects it while you are away from your desk. This exercise starts with client portfolios left open while you fetch a file, and a visitor with a phone who needs less than two minutes to photograph them. A week later your clients receive phishing emails built from that data. You will verify encryption in Settings, practice the Windows+L lock until it is automatic, and lock a colleague's unattended screen with a friendly private note.

What You'll Learn in Encryption & Lock Discipline

• Verify that full disk encryption (BitLocker or FileVault) is enabled on your work devices and understand what it protects against
• Lock your workstation with Windows+L every time you step away, even for a moment
• Recognize how quickly a visitor or social engineer can photograph an unattended, unlocked screen
• Respond to a colleague's unlocked workstation by locking it and sending a private, non-confrontational reminder
• Understand why encryption and screen locking serve different but complementary security functions, and why both are required

Encryption & Lock Discipline — Training Steps

1. A Busy Morning at Cascade Financial

   It's a busy Thursday morning. You're reviewing three client portfolios ahead of quarterly review meetings this afternoon.

2. Reviewing Client Portfolios

   Alice opens the internal client portal to review the Henderson, Park, and Okafor accounts. She logs in and pulls up the portfolio dashboard.

3. An Urgent Phone Call

   Alice's phone rings. It's David Chen from Vennacott Capital, who handles the Henderson account. He needs the Q3 performance summary urgently for a board meeting that was moved up to this afternoon. The physical file is in the records room down the hall.

4. Rushing to the Records Room

   David needs that file NOW. Alice jumps up from her desk, grabbing her badge. In her rush, she completely forgets to lock her workstation. The client portfolio data for the Henderson, Park, and Okafor accounts remains fully visible on screen. Three client portfolios. Wide open. Anyone walking by can see everything.

5. Someone Stops at Your Desk

   Alice is down the hall in the records room. A visitor walks onto the floor on his own, stops behind her empty chair and raises his phone at her screen. Henderson, Park and Okafor are all still on it. Nobody on the floor asks who he is with.

6. Gone Before She Is Back

   He lowers the phone, turns and walks off toward the lifts. The pass says he needs an escort, but nobody was with him. The whole visit took less than two minutes.

7. Back at Your Desk

   Alice returns with the Henderson file. Her screen is exactly as she left it, portfolios still open. Nothing on it shows that anyone stood behind her chair, so she doesn't think twice about it. She sends David the information he needs and continues her day.

8. A Normal Week Passes

   One week later. Alice is starting her Monday morning when an email from IT Security stops her cold.

9. The Incident Report

   The email is devastating. Three of Alice's clients, Henderson, Park, and Okafor, reported receiving targeted phishing emails containing their exact portfolio details. The data exposure was traced to Alice's workstation.

10. What Happened While You Were Gone

    The incident report pieces together the 5 minutes Alice was away from security camera footage and the badge scan log. It matches what you watched from the room: the visitor on pass V-847, standing behind her chair with his phone raised at her screen.