"In college, I took a cybersecurity ethics course that covered this subject. If I ever find myself in a questionable situation like this, I will first make sure that I'm clear on the exact request and that I'm not making assumptions or jumping to conclusions. No matter who is making the request, whether it be a coworker or a superior, I will make sure to remain professional and calm, but if I believe there's an issue I will be forthright about it. If this doesn't deter the asker, I'll go up the chain of command and ask my manager for their opinion. Refusing to carry out the action will be easier if I'm backed by my manager who has more authority than me. I'll also point out the potential negative ramifications so the person fully understands why I can't carry out their request."