Digital Life — Unit 21, Upper-intermediate English

**IT Security Bulletin · April**

All staff must **back up** work files to approved **cloud storage** at least weekly. **Portable devices** — laptops, tablets, and phones — must use encryption and current patches; hardware that is **out of date** or **obsolete** will not be supported after June.

Before you **upgrade** the operating system, **plug in** your charger and confirm you can **log in** to the corporate portal. If an application **freezes** or **crashes** during migration, **reboot** once, then contact the helpdesk to **troubleshoot**. Do not **shut down** by holding the power button during updates.

**Privacy settings** on personal apps should limit location sharing on company networks. Disable non-essential **push notifications** during video calls. Staff who **go online** using public Wi‑Fi must use VPN; **poor signal** is not an excuse to bypass policy. **Network coverage** in rural areas may be weak — plan offline work accordingly.

Remember: unmanaged devices that **run out of storage** often fail backups. Clear downloads monthly and reduce your **digital footprint** on guest networks. **Scroll through** permission screens carefully when installing tools.

Travel: **shut down** laptops fully before packing — sleep mode is not sufficient for cross-border trips. Chargers must be **plugged in** during firmware installs. Tablets that **run out of battery** mid-sync may corrupt files.

The refreshed portal is more **user-friendly**, but you still must **log in** with MFA. Legacy kit is not yet **obsolete**, yet patches more than ninety days **out of date** trigger compliance alerts.

Questions: ext. 4410 · helpdesk@company.internal

**Addendum · June · what changes and what does not**

**On the June support deadline.** Devices classed as **obsolete** will continue to function; what ends is support and security patching. Staff have asked whether this means their machine stops working on 1 July. It does not. It means that from 1 July any vulnerability discovered in it will not be fixed, which is a slower and considerably more serious problem than a device that fails outright.

**On bring-your-own devices.** The policy above has been read as prohibiting personal phones for work email. It does not. Personal devices may access mail and calendar through the managed application, which does not touch the rest of the phone. They may not access file storage, source control or customer records under any circumstances, and enrolling a personal device in full management is not permitted even where staff have offered.

**On the VPN requirement over public Wi-Fi.** Several people have pointed out, correctly, that most traffic is now encrypted in transit and that the VPN adds latency for limited benefit. The requirement stands, for a narrower reason than the one in the bulletin: it is not about eavesdropping but about a small number of internal services that trust network origin. We are removing that trust, and when the last such service is migrated — targeted for Q1 — the requirement will be relaxed rather than defended.

**On backups.** Weekly is the minimum, not the recommendation. Of eleven data-loss reports last year, nine involved a device lost or damaged within four days of its last backup. Continuous sync is available, costs nothing, and is enabled by default on new machines. If yours is not enabled, it was disabled at some point by somebody.

**On reporting a lost device.** Report it immediately, at any hour, to the number below. There is no penalty and there never has been. The average delay in reporting last year was nineteen hours, and every one of those delays was a person hoping to find the device first.