Take a Second. Stay Secure.

Most of us already know we should be careful online. Knowing isn’t really the problem anymore.

The problem is doing it. In the middle of a busy day. On your phone. With twelve tabs open and someone waiting on a reply.

So the focus is on action. Not on learning everything about cyber security, but on taking one small step and building it into your routine.

Think about how most scams actually land. A text saying your parcel is stuck. An email from “your manager” asking for something urgent. A login page that looks almost right.

None of them need you to be careless. They just need you to be rushed.

That’s why the pause matters. Taking a second before you click a link, share information, create a password or respond to an unexpected request is often enough to notice that something feels off.

You don’t need to be a cyber expert to stay secure. You just need a moment.

• 🔄Apply updates. Keep your devices, operating systems and apps updated to protect against known security risks.
• 💾Back up regularly. If something goes wrong, a recent backup means you lose far less.
• 🔐Turn on multi-factor authentication. An extra step at sign-in makes it much harder for someone else to get into your accounts.
• 🎣Learn to recognise scams and report them. Knowing the signs protects you, and reporting helps protect everyone else.
• 🔑Use long, unique passphrases. A different passphrase for each account means one leak doesn’t unlock everything.
• 🧠Know the threats. If you know what common attacks look like, you’ll spot them faster.
• ⚙️Check your privacy settings. Decide who can see and access your personal information.
• 📱Think before you share on socials. Your pet’s name, your school, your birthday. These are often the answers to security questions.

You don’t need to do all eight this week. Pick one. Turning on multi-factor authentication for your email is a great place to start, because your email is the key to resetting almost everything else.

The National Office of Cyber Security has released a free Cyber Security Action Month Stakeholder Toolkit. It’s full of helpful tips, links and tools you can use within your organisation to promote simple steps your staff and volunteers can take to strengthen your cyber security.

And it’s genuinely useful, because most of the work is already done for you. Inside you’ll find:

• ✉️Ready-to-use email copy in long and short versions, plus an internal message you can send to your staff.
• 💬Draft social media captions you can copy and adapt.
• 🖼️Posters, lock screens, Teams backgrounds, email banners and email signatures, with or without government branding.
• 🔗A list of trusted links for checking your cyber safety, reporting scams, and finding translated and First Nations resources.

My favourite piece of advice in the toolkit is the simplest one. Don’t try to push all eight actions at once. Choose one or two that matter most to your people and repeat them throughout the month.

Small teams don’t need a cyber security department to take part. One email, one poster in the kitchen and one new habit is already a win.

A simple way to run it:

• 1️⃣Send the internal message at the start of October.
• 2️⃣Pick one action, like turning on multi-factor authentication, and give people ten minutes in a team meeting to actually do it.
• 3️⃣Put up a poster or set the Teams background so the message stays visible.
• 4️⃣Remind everyone where to report a scam, so they know what to do if something gets through.

The pause before you click. The update you stop postponing. The friend you warn about a scam text.

None of these feel big. But they add up, and they protect more than just you.

So this October, take a second. Pick one thing. Then share it with someone who needs it.

💜