Keeping home and work devices properly separate

Avoid using a personal, unmanaged laptop for sensitive work data if at all possible — it won't have the same security patching, encryption or endpoint protection as a company-managed device. If a personal device must be used occasionally, keep work data inside browser-based apps rather than downloaded locally, and never save company passwords into a personal, unmanaged browser profile.

Coach's tip: a cheap, basic company laptop is almost always safer than an expensive personal one nobody is managing or patching.