National Cybersecurity Awareness Month

Each October, as the temperatures start to drop and the leaves begin to turn, we recognize National Cybersecurity Awareness Month, a global initiative designed to raise awareness about cybersecurity and staying safe online. Originally launched in 2004 and co-led by the National Cybersecurity Alliance and the Cybersecurity and Infrastructure Security Agency (CISA), the annual campaign features several themes each year. For 2026, the theme is “Don't Make It Easy for Them,” coupled with “Securing the Next 250” in recognition of the 250th anniversary of the United States.

This year’s campaign is especially important as cyber risks fueled by artificial intelligence (AI) continue to increase. While AI is undoubtedly a revolutionary technology, its well-documented use by cybercriminals makes preventing, detecting, and responding to attacks more important, and more difficult, than ever. However, despite the growing speed and sophistication of AI-enabled cyberattacks, many fundamental cybersecurity practices remain critical. These include using multifactor authentication, maintaining strong passwords and/or passkeys, keeping software up to date, implementing controls over financial and banking transactions, and providing ongoing cybersecurity training.

Those controls, and the mindset that underlies them, are the focus of this year's theme: “Don't Make It Easy for Them.”  Even with the use of AI and other modern cybercrime tools, bad actors often target the weakest link or the least secure organization. For example, if your company’s firewall is secure and updated, an attacker may choose an easier target rather than spend more time trying to breach it.  Compare that scenario to a company using an old, unsupported firewall with outdated software and default manufacturer passwords still enabled. This second firewall is far easier to breach, making that organization a more attractive target for cybercriminals.

Over the next few weeks, we will discuss practical ways to secure both your organization and your personal life online and how not to “make it easy for them.” We will explore best practices related to multifactor authentication; passwords, passkeys, and password managers; email security tips and tricks; and other important cybersecurity controls. For businesses and other organizations, we will also discuss the concepts of cybersecurity strategy and governance.

Implementing controls simply for the sake of having them is rarely effective. Instead, organizations should think strategically about cybersecurity and develop a roadmap for strengthening their overall security posture. A thoughtful, risk-based approach is far more effective than deploying controls without a clear plan.

Happy Cybersecurity Awareness Month!