← How you’re exposed

Tech teamRunning a website or small org

Tailgating & physical access

Someone walking in behind you through a locked door.

Understand it

Not every attack is digital. A held door for a “colleague” whose hands are full, or a confident stranger in hi-vis, can put an intruder among unlocked computers and papers.

How to spot it

People you do not know in staff-only areas, propped doors, no checks on visitors.

Close the gap

  1. Challenge or report anyone without a pass - courteously, but always.
  2. Do not hold a secure door for someone you cannot vouch for.
  3. Lock your screen when you step away, and clear sensitive papers.
  4. Keep a simple visitor sign-in and badge.

What to do about it

This sits with whoever builds and runs your website or systems - it’s beyond what a personal plan should promise to fix. If that’s not you, hand it to whoever looks after your security. We’d rather be honest about where we stop.

Your own accounts and devices are still worth protecting; your plan covers those.