Doing it right for our company 19 Code of Conduct Doing it right for our company Protecting AAR’s assets In our work for AAR, we use Company assets every day, such as equipment, supplies, funds, licenses, trademarks and time. We must use Company assets responsibly and appropriately, protecting them from waste and abuse. How we own it • Use AAR’s assets for legitimate business purposes, in accordance with all Company policies and procedures. • Making incidental and limited personal use of electronic assets—such as computers, software, Internet access, e-mail systems, voice mail and mobile devices—is fine, but you should use them primarily for business purposes. • Never use Company electronic assets to send or view offensive content. • Remember that where allowed by local law, AAR may monitor your use of its electronic assets, so you should have no expectation of privacy. • When using electronic assets, always follow good information security practices: • Use strong passwords for all your accounts. • Never download software without permission, as it could contain malware. • Be careful of “phishing” attempts, and do not click on links in emails from senders you do not recognize. • Report suspicious emails to the Information Technology Department immediately. See the Information Technology, Mobile Device and Cyber Incident Reporting policies for more information. Safeguarding confidential information AAR’s confidential information is vital to its business success. Confidential information can be business, technical or financial in nature, and typically includes: • Trade secrets • Business strategies • Technical designs • Financial records that have not been made public • Cost and pricing information We must safeguard this information and use it only for AAR’s benefit. Rosanna is a project planner and uses a number of different software applications to do her work—and each one requires a password. To make it easier to remember, she uses the same password for all of them: the name of her dog. Is Rosanna Doing It Right? No, Rosanna needs to use different passwords for each application, and they need to be more complex than just the name of her dog. That is too easy to guess, and using it for multiple applications means that someone could access all of them just by guessing one password. We need to use strong, unique passwords in order to protect our Company’s electronic assets and the information they contain.