I have just started interviewing for new computer job after years of working from home.
At home I feel very secure with how I protect myself from data loss and keeping my secrets secure. I backup both of our computers with the awesome-four-dollar-a-month CrashPlan, and, in addition to my programming projects, I use Bitbucket to individually backup every substantial thing on my computer. This includes Firefox FEBE backup, XYplorer settings, Sublime Text settings, my website, some personal documents, and smaller-sized configuration settings for a whole bunch of other applications).
Most importantly, given the horror of malware like (the former) CryptoLocker and (current) CryptoWall, these offline backups are not connected to my computer, except during the actual backup process. I don't use Dropbox for anything except short-term document transfers. (I would be surprised if Dropbox didn't release a disconnected version at some point.)
As far as secrets, I use 1Password (which requires a master password) and AxCrypt (which uses both a passphrase and key-file) to encrypt anything even mildly private.
The most important thing I'm concerned about in the workplace, is how do I protect my master password, which I have to enter around a hundred times every day?
I'm thinking of making the 1Password timeout moderately longer, but to make it a(n absolutely infallible) habit, that every time I get up from the computer, I lock it...which also locks the 1Password vault. I also always use their "Secure login".
(I should get a string and alligator clip like they have on treadmills, that when you pull away, it auto-shuts off.)
Seriously, though, how far do you take it? Do you put a towel over your hands every time you enter it?
My other major concern is, although I want to minimize the amount of encrypted documents I have on my work machine, how do I conveniently unencrypt documents, when the key file has to be a plain-text file, but (a) I don't want to just leave the key file sitting there vulnerable, yet (b) I also don't want to have to create-use-then-destroy this document each time, either. (Both the AxCrypt passphrase and key-file text are in 1Password.)
My last major concern is my computer getting eaten alive because a coworker on the same network got tricked into installing CryptoWall. I think my backup habits generally cover this, although I'm not sure if my employer would allow me to use CrashPlan, or if I'd be forced to use something in-house, which scares me a little.
And some paranoid (?) concerns: Key-loggers, spy cameras, and tracking my online activity.
Two remaining thoughts: Do you just avoid Facebook and multi-clipboard managers (because I know of none that have built-in password protection/purging features) at work?
I would love a checklist of the most important things to be wary off, and the most important things to do/not do, to protect myself, my data, my secrets, and my online privacy when at work.