Cybersecurity Awareness Month: Simple Habits to Help You Stay Safe Online

October is Cybersecurity Awareness Month! A 20+ year initiative led by CISA and the National Cybersecurity Alliance to help people take easy, everyday steps to stay safe online.

Why it matters: cybercrime losses reported to the FBI hit a record $16 billion in 2024 - up 33% from the previous year.

Think good cybersecurity requires complex tech and a huge budget? Think again. For small businesses, effective protection often comes from simple, consistent habits. This Cybersecurity Awareness Month, let’s move beyond the overwhelm and focus on small actions that can make a big difference.

6 Cybersecurity Habits to Help You Stay Safer Online

Good cybersecurity isn’t about having the most expensive tools - it’s about building smart, consistent habits. Here are six practical tips to help improve your online safety:

Habit #1: Lock Down Your Logins & Use MFA

Weak or reused passwords are like leaving your front door wide open. Make it a habit to create strong, memorable passphrases instead of complex character combinations. For example, "correct horse battery staple" is stronger than "P@ssw0rd1.” NIST’s guidance favors length over funky complexity; think four or more random words, unique per site, stored in a reputable password manager.

Turn on multi-factor authentication (MFA) wherever possible. MFA blocks a big chunk of account takeovers because a stolen password alone isn’t enough. Start with email, banking, payroll, and social accounts; you may want to consider an authenticator app over SMS. It’s a quick extra step that helps thwart account takeover attempts.

Make it stick

• Enable MFA on your most important accounts first; e.g., password manager, email, cloud storage, and payroll.
• Save app-based codes (TOTP) and keep backup codes somewhere safe.
• Turn on breach alerts in your password manager to catch exposed logins fast.

Habit #2: Don’t Trust, Verify

Phishing scams remain the top initial vector, and they’re getting sneakier. Before you click a link or download an attachment, pause. Ask yourself:

• Was I expecting this?
• Does the sender’s address look right?
• Is it asking for urgent action or sensitive info?

And always verify wiring instructions or payment changes by phone using a known number.

Make it stick

• Flag “urgent” money or password requests
• When in doubt, go direct: type the site URL instead of clicking email links

Habit #3: Update Without the Urgency

Software updates aren’t just about new features - they patch security holes. Make it a habit to update your devices and apps as soon as updates are available. Better yet, turn on automatic updates so you don’t have to think about it urgently.

Make it stick

• Toggle automatic updates in Settings (OS, browser, mobile).
• Remove software you don’t use.

Habit #4: Back It Up (and Test It)

Imagine losing all your business data tomorrow and the wider impact that might have. Make it a habit to back up your critical files regularly. Use the 3-2-1 rule:

• 3 copies
• 2 different types of storage
• 1 off-site (like the cloud)

And don’t just set it and forget it - test your backups periodically to make sure they actually work.

Habit #5: Secure Your Devices

Lost phones and laptops are a fast path to account compromise. Turn on device encryption (such as, FileVault on Mac, BitLocker on Windows, for example) and use antivirus or endpoint detection & response tools, if possible.

Make it stick

• Enable screen-lock + auto-lock; add “Find My” and remote-wipe.
• Avoid public Wi-Fi for sensitive tasks; use a hotspot when possible.

Habit #6: Talk About It

Cybersecurity isn’t just an IT concern - it’s a team effort. Make it a habit to talk about security with your employees. Share tips, celebrate good habits, encourage asking questions and reporting suspicious activity.

Small Steps, Big Impact

You don’t need to overhaul your entire system overnight. Start with one habit this week - maybe it’s updating your passwords to passphrases and turning on MFA. Then build from there. These small, consistent actions can add up to a much stronger defense.  Note that these tips are general, best practices and your needs may vary depending on your industry and systems, so be sure to adapt your practices accordingly or consult a professional for guidance.

Want Help Making Cybersecurity a Habit in Your Business?

Attackers increasingly target individuals because it works - the “human element” remains central in breaches. A few simple habits can help meaningfully lower your risk.

If you want help rolling out services like these company-wide, Acrisure Cyber Services can help:

• MFA enforcement
• Phishing simulations
• Managed detection & response
• Backup/restore testing

Acrisure Cyber Services can set it up without disrupting your day-to-day.

We can also brief your team for Cybersecurity Awareness Month.

Contact Acrisure Cyber Services for a no-cost cybersecurity assessment. We’ll help you spot the gaps and build a simple, effective plan that fits your business.

Schedule your no-obligation chat today!