Use Cybersecurity Awareness Month as a springboard -- not a fire drill | TechTarget
Rawpixel.com - stock.adobe.com
Published: 01 Oct 2026
Every October, enterprise cybersecurity teams schedule phishing simulations, host lunch-and-learns and remind users to practice good password hygiene. Then November arrives, and -- in many organizations -- attention fades.
"By December, the [phishing] click rates are right back where they started," said Chris McGlasson, fractional CIO with ClearStack Advisory. He told TechTarget he sees this pattern unfold firsthand in many of his client organizations. "The month doesn't create vigilance; it creates a checkbox."
The U.S. Department of Homeland Security and the National Cybersecurity Alliance(NCA) started Cybersecurity Awareness Month in 2004 to help Americans stay safe online. Experts agree the month has strategic value in the enterprise -- if CISOs use it to jump-start security initiatives and generate momentum they can sustain for the rest of the year. Organizations that treat Cybersecurity Awareness Month as an annual fire drill, however, risk...
Copyright of this story solely belongs to www.techtarget.com. To see the full text click HERE
