Step 1 of 6
Learn
Before you start
By the end of this lesson you will be able to:
- Recognize personal and confidential information.
- Use safer access practices.
- Understand least-privilege access.
- Apply basic password, MFA, and device security habits.
- Respond appropriately to a suspected security issue.
Key idea
Client trust includes information security. Convenience is not a good reason to weaken access controls.
Learn
Basic security practices
- Use strong, unique credentials and MFA where available.
- Prefer delegated access over sharing master passwords when a platform supports it.
- Use only the access needed for the task.
- Do not download or copy sensitive information unnecessarily.
- Keep devices and software updated.
- Be cautious with public or shared devices and networks.
- Follow the client's retention and deletion rules.
- Remove access when work ends, according to the client's offboarding process.
Learn
Philippine context
When working from the Philippines, handling personal information should be consistent with applicable privacy requirements, including the Data Privacy Act of 2012 (Republic Act No. 10173) and relevant National Privacy Commission guidance.
This course is not legal advice; learners should follow the client's policies and applicable law.
Practice
Three quick situations
Practice → Decide
Working from a co-working space
You're finishing up at a co-working space on public wifi, and the client asks you to quickly check something in their banking portal.
What should you do?
Apply
Work sample: VA Security Checklist
Mark Yes or No for each item as it genuinely applies to how you'd work, and add a short note.
💾 Save your work now. Copy this checklist into a Google Doc — that's part of your starter portfolio.
Preview / export
✓ Lesson 12 Processed
Nice work.
You've practiced choosing the safer option even when it's less convenient — and reporting a mistake honestly instead of hiding it.