Mastro Luxe Portal
All news

Cybersecurity Awareness: What Every Employee Must Know

April 14, 2026


Most security problems do not start with hackers breaking into systems. They start with a person clicking the wrong link, using a weak password, or leaving a device unlocked. This guide explains three things every employee must do to help keep the company safe.

1. Recognize Phishing Emails

Phishing is a fake email or message that tries to trick you into clicking a link, opening a file, or giving away information like your password.

Warning signs:

  • The message says you must act "urgently" or "immediately"
  • It asks you to click a link or open a file you did not expect
  • The sender's email address looks slightly wrong
  • It asks for your password, OTP code, or approval for payment
  • It claims to be from a manager but feels unusual

What to do:

  • Do not click the link or open the file.
  • If the request seems unusual, call the person to confirm. Do not reply to the email.
  • Report the email to IT Security right away, even if you are not sure.
  • Never type your company password after clicking a link from an email.

2. Use Strong Passwords

Many accounts are hacked simply because the password was weak or used on more than one system.

What to do:

  • Use a different password for every system. Do not reuse passwords.
  • Make your password long, not just complicated. A longer password is safer.
  • Turn on multi-factor authentication (MFA) whenever possible. This adds a second check beyond your password.
  • Use a password manager instead of writing passwords down.
  • If you think your password may be exposed, change it and tell IT immediately.

3. Protect Your Devices

Your laptop and phone can give access to company systems. If they are not secure, attackers can use them to get in.

What to do:

  • Install software updates as soon as they are available.
  • Lock your screen every time you step away, even for one minute.
  • Do not use public Wi-Fi for work unless you are connected through the company VPN.
  • Only install software approved by IT.
  • If your device is lost or stolen, report it to IT immediately.

When You Are Not Sure

If something feels wrong, stop and ask before you click, share, or approve anything. It is always better to check first than to fix a problem later.

Report suspicious activity to: it@mastroluxe.com