Reduce risk of personnel accessing illegal, virus-infected or phishing websites by blocking their IP/domain. Identify the sites personnel should not access (e.g. malicious, illegal content) and follow rules for safe and work-appropriate online resource use. Train personnel on secure and work-appropriate online resource use, including not overriding browser advisories and exceptions for restricted web access.