Device and physical security training module

Purpose

This is the required device and physical-security training module for HiringCoachAI personnel. HiringCoachAI is fully remote and operates no first-party offices or data centers, so physical security means protecting the devices, screens, authenticators, and workspaces used to access HiringCoachAI systems.

The full policy is physical security. This module is the signable training artifact for personnel.

1. Keep Work Devices Hardened

Any device used for HiringCoachAI work must have:

• Full-disk encryption enabled.
• Automatic screen lock enabled.
• Operating system and browser updates applied promptly.
• Reputable anti-malware protection where available.
• No untrusted browser extensions or software used with work accounts.

Do not use shared or unmanaged devices for customer data, source code, production access, or vendor dashboards.

2. Protect Screens And Workspaces

Avoid exposing customer data, credentials, source code, internal documents, or vendor dashboards in public or shared spaces. Lock your screen when stepping away.

Use care when screen sharing. Close unrelated tabs and documents before sharing.

3. Handle Mobile Devices And Authenticators Carefully

If a phone, tablet, authenticator app, or hardware key is used for work accounts, it must be protected by device unlock. Enable find-my-device or equivalent remote-lock capability where available.

Do not leave hardware authenticators, unlocked phones, or recovery codes unattended.

4. Report Loss Or Theft Quickly

If a work device, authenticator, recovery code, or device with work sessions is lost or stolen, report it within 1 hour of discovery. The Security Officer will coordinate remote lock or wipe, session revocation, credential rotation, and breach assessment.

5. Remove Local Data When Done

Do not keep customer exports, screenshots, logs, or production data locally longer than needed for the approved task. Delete local copies when the task is complete.

Before disposing of a device that held HiringCoachAI data or credentials, perform a secure wipe or cryptographic erase and log the disposal if required.

Acknowledgment

By acknowledging this module in /admin/onboarding, I confirm that I understand HiringCoachAI device and physical-security expectations, will keep work devices hardened, will protect screens and authenticators, and will report loss or theft promptly.