Cybersecurity
Cybersecurity Awareness Month: the four things that actually matter
Every October, a wave of cybersecurity advice washes over small business owners. Most of it is correct, and most of it is too long to use. A list of twenty things doesn’t tell you where to start. It mostly makes you feel behind.
So here’s the short version. CISA and the National Cybersecurity Alliance run the national Cybersecurity Awareness Month campaign, and they’ve narrowed it down to four actions, each one something you can do this week.
1. Learn to spot and report phishing
Most breaches start with an email that looks close enough to real. Four red flags cover most of it: false urgency, a sender address that’s almost right, a link that doesn’t go where the text says, and an attachment nobody asked for.
The second half of that action matters more than the first: report it. When people quietly delete suspicious emails, nobody else hears about them. When they flag them, the whole team gets an early warning.
2. Use strong, unique passwords
People reuse passwords because nobody can memorize forty unique sixteen-character strings, and policies that pretend otherwise have never worked. Use a password manager. You remember one password and it remembers the rest.
3. Turn on multi-factor authentication
If you do one thing this month, do this. With MFA on, a stolen password by itself is worth almost nothing to an attacker. It takes about thirty seconds per account.
Start with email, because it’s the account that can reset all the others. Then banking, then anything holding customer data.
4. Keep your software updated
It’s the least glamorous item on the list and one of the most important. Attackers scan the whole internet, constantly and automatically, for known holes that were patched months ago. They don’t know your name. They know your version number.
Turn on automatic updates for phones, laptops, routers, and the boxes in the closet that nobody thinks about.
That's the list
If you did two of these four this month, you’d be ahead of most businesses your size. That says more about how low the bar sits than about anyone’s effort.
All four fit in an afternoon, and none of them needs an enterprise budget.
Want to know where you actually stand? We do free, no-pressure security checks for small businesses across the East Bay, covering backups, accounts and defenses. We tell you plainly what to fix first.
Framing follows CISA’s “Secure Our World” campaign, the official national Cybersecurity Awareness Month program.