See Something? Say Something!
Do you notice something odd, or different, and think you should mention it? Do! Resolution to security incidents rests on one thing: Time. Fast response to a security incident relies on fast reporting.
Security incidents can come in three domains: cyber, physical, or people. For example, a phishing email is a cyber threat. A messy desk with passwords written on a sticky note is a physical risk. An unfamiliar person in a restricted area of your building, unaccompanied by an employee, is a red alert in the people domain.
It never hurts to double check what you notice, or report your suspicions. You could avert a security risk that otherwise would have gone undetected for days, months, or even years.