YOUR TCO
Pause. Think. Secure.
Small actions make a big difference.
Here’s how to protect TCO’s information wherever you work.
This page brings together the most important actions that help protect our systems, our projects, and each other. Information security is part of how we work at TCO every day.
You don’t need to remember everything – just remember to pause, think, and act securely.
Not sure how to apply these steps? No problem! Reach out to your manager or the IT team. We’re here to help.
Before you prompt...
AI can help us work smarter, but it must be used responsibly.
1. Choose the right tool
TCO have standardized on Microsoft Copilot (M365 + Azure Open AI).
This is the only AI tool and platform we can use for TCO work.
2. Need access to AI tools?
Request information from your line manager based on your needs.
3. Use caution with sensitive TCO and Customer Information
Third party and customer information needs pre-approval before sharing with AI.
4. Check before you trust
AI outputs must be reviewed and verified before use.
5. Keep people accountable
AI supports decisions; it does not replace human judgement.
6. Stay accurate and compliant
Do not use AI to create misleading claims, commitments or content that could breach TCO standards.
Network security
Stay safe on the go.
When you’re traveling or on holiday, please use your mobile hotspot instead of public Wi-Fi. It’s the simplest way to keep your connection private and secure.
Policy: AFO-ADM-191
Data classification
Share with care.
Take a moment to learn our classification levels so you know exactly what can be shared and when. If you’re discussing classified details out loud, make sure you’re in a private spot where others can’t overhear.
Policy: AFO-ADM-184 & AGP-ADM-193
Labelling
Make it clear.
Tagging your documents helps everyone handle information correctly.
In Office Apps: Head to the Design tab to add a watermark.
Emails & Docs: Use the Sensitivity button under the Home tab to pick the right class.
Policy: AFO-ADM-186
Passwords
Keep it private.
Your login details are for your eyes only. Please avoid sharing passwords with colleagues or using shared credentials—this ensures your work and identity stay protected.
Policy: AGP-ADM-187
Incident reporting
See something? Say something.
If you spot a digital threat or a security slip-up, let your supervisor know and log it in Input Process right away. Quick reporting is our best defense!