There are many ways that endpoint use can go wrong in a workplace setting -- especially when security isn't accounted for when programming the device or when developing its usage policies. This session will identify and examine some of the most common preventable forms of device security malpractice -- from misconfigurations to lack of patching to recklessly visiting suspicious websites. We'll also suggest how organizations can do a better job of curbing poor cyber hygiene behavior when actively using devices.