Store credentials in a secure vault (do not send via email, tickets, chats, or paste into public tools).
Never hard‑code credentials in source code or commit them to any repository.
Limit use to authorized personnel, follow least‑privilege practices, and rotate credentials regularly.
Your API credentials are issued to your organization and must not be shared. Treat them as confidential: store only in secure vaults, never paste into emails, tickets, chats, or public tools, and never commit them to code repositories. Rotate credentials regularly and revoke them immediately if you suspect exposure.
If you suspect that any credential has been exposed, mishandled, or compromised in any way, immediately revoke it and contact, ALCS CSIRT (ALCS)
Alcscsirt@altria.com to report the potential security incident.
