Learn more about Cybersecurity Awareness Month!
Every October, Cybersecurity Awareness Month encourages individuals and organizations to develop habits that help protect their accounts, devices, and information. In 2026, the campaign’s two lead organizations share complementary messages. The National Cybersecurity Alliance reminds individuals, “Don’t Make It Easy for Them,” encouraging people to take small, consistent actions that make it more difficult for cybercriminals to succeed. The Cybersecurity and Infrastructure Security Agency encourages organizations and critical infrastructure partners to, “Secure the Next 250 Together,” in recognition of the United States 250th anniversary. Together, these messages emphasize the importance of taking practical steps to strengthen cybersecurity.
These messages also connect directly to privacy. Cybersecurity helps protect systems and information from unauthorized access, misuse, or disruption, while privacy focuses on how personal information is collected, accessed, used, shared, and retained. When cybersecurity protections fail, personal information may be exposed. Similarly, unclear or careless privacy practices can place sensitive information at unnecessary risk.
A Brief History of Cybersecurity Awareness Month
Cybersecurity Awareness Month began in 2004 as a partnership between the U.S. Department of Homeland Security (DHS) and the National Cybersecurity Alliance (NCA). In 2018, the Cybersecurity and Infrastructure Security Agency (CISA) was established within DHS and later assumed the federal cybersecurity awareness role. Today, CISA and NCA work together to provide cybersecurity education, resources, and awareness materials.
Through this ongoing collaboration, Cybersecurity Awareness Month has continued to adapt as technology and cyber threats evolve. Each October, it provides an opportunity for individuals and organizations to revisit essential security habits, learn about emerging risks, and promote greater awareness throughout the digital community.
Cybersecurity Do’s and Don'ts
There are several simple actions individuals can take to help protect their accounts, devices, and personal information:
Do’s | Don’ts |
| Use strong, unique passwords for each account. | Don't reuse the same password across multiple accounts. |
| Enable multi-factor authentication whenever possible. | Don't approve unexpected login or authentication requests. |
| Keep your software, devices, and applications updated. | Don't continue using outdated or unsupported systems. |
| Verify links and email senders before clicking links or downloading attachments. | Don't click on unexpected links or attachments. |
| Recognize and report suspicious messages or phishing attempts. | Don't respond to suspicious requests for information. |
| Use an approved password manager to securely store passwords. | Don't write passwords down in unsecured locations or share them with others. |
| Back up important information and use approved security protections. | Don't ignore security warnings or leave important information unprotected. |
| Share only the personal information that is necessary. | Don't share sensitive information with unverified individuals or services. |
| Lock your computer, phone, and other devices when they are unattended. | Don't leave devices unlocked or unattended in public areas. |
These actions support important CES Global Privacy Principles, including Data Minimization and Protection. By limiting the information we share, and securing the information we access, we can help reduce the risk of unauthorized access, misuse, or disclosure.
Learn more here about applying Privacy Principles in your daily activities.
Ways to Participate in Cybersecurity Awareness Month
Use the following tips to make it more difficult for cybercriminals to succeed:
- Review your privacy settings on your phone, computer, applications, and social media accounts.
- Enable multi-factor authentication on your most important accounts.
- Review your passwords and consider using an approved password manager.
- Install pending software and device updates.
- Learn how to identify phishing and other social engineering attempts.
- Use approved systems and applications when storing or sharing sensitive information.
- Be cautious when using artificial intelligence tools and avoid entering confidential or personally identifiable information into unapproved services.
- Report suspicious activity quickly if you see or click on a suspicious link, lose a device, or believe information may be exposed.
- Click here for information on Reporting Suspicious Emails or Messages.
- Click here for information on Reporting Information Security Incidents.
Learn More Through CES Security
For additional security awareness training and resources, visit CES Security. This site includes information about phishing, social engineering, suspicious emails, gift card scams, and other common information security threats.
Learning how these threats work can help you recognize suspicious activity, protect personal and institutional information, and know when to report a concern.
Small Actions, Lasting Protection
Cybersecurity Awareness Month is a reminder that protecting information is a shared responsibility. Students, faculty, staff, and organizations all play an important role in protecting personal and institutional information. Simple actions – such as pausing before clicking a link, securing an account, limiting the information you share, or reporting concern – can help reduce risk and protect your privacy.
If you experience a possible privacy or cybersecurity incident, report it as soon as possible through the appropriate institutional process. Early reporting can help protect your information and limit the potential impact on others.
By participating in Cybersecurity Awareness Month, you can help make it more difficult for cybercriminals to access information and compromise accounts. Take time this October to review your cybersecurity habits and encourage others to do the same. Together, we can help build a stronger culture of privacy, security, and responsible data protection across the CES institutions.
Learn more through the NCA's Cybersecurity Awareness Month 2026 resources, and CISA’s Cybersecurity Awareness Month resources.