Before leaving home, do we protect our digital lives as carefully?
Before leaving home, most of us instinctively lock the door. We close the windows, protect our valuables, and make sure our keys aren’t left in plain sight. But do we take the same precautions with our digital lives?
Between online shopping, social media, email, and workplace applications, we rely on dozens of digital services every day. Sometimes, a seemingly harmless habit can have consequences that extend far beyond our personal lives.
Imagine an employee at a Quebec small business using the same password for an online shopping account and their work email. If the retailer experiences a data breach, cybercriminals could try those stolen credentials to gain access to the company’s systems.
Cybersecurity doesn’t stop when you leave the office. Our personal digital habits can directly influence the security of the organizations we work for.
This October, let’s take the opportunity to revisit a few simple habits that can make a meaningful difference.
October Is Cybersecurity Awareness Month
Every October, Cybersecurity Awareness Month encourages individuals and organizations to develop safer digital habits and become more aware of online threats.
In Canada, the federal government’s Get Cyber Safe campaign provides practical resources and advice to help Canadians protect themselves online.
The theme for 2026 is particularly fitting: “The Best Defence Is You.”
It’s a timely reminder as cyber threats become increasingly sophisticated. Artificial intelligence now allows fraudsters to create convincing messages, impersonate trusted organizations, and even imitate someone’s voice.
The Government of Quebec also participates in cybersecurity awareness efforts, as highlighted in its official announcement about Cybersecurity Awareness Month (available in French).
For Quebec small and medium-sized businesses (SMBs), October is an excellent opportunity to reinforce an important message: cybersecurity isn’t just about antivirus software, firewalls, or IT teams.
It also depends on the everyday decisions we make.
At Home: Small Habits That Make a Big Difference
Are Your Passwords Really Protecting Your Accounts?
We’ve all been tempted to reuse a password rather than create and remember another one.
Unfortunately, this seemingly convenient habit can turn a data breach on an ordinary website into a much more serious problem.
Cybercriminals who obtain stolen login credentials may try them on other services, including email accounts, social media platforms, and business applications.
Using a password manager makes it easier to create and securely store long, unique passwords for every account without having to memorize them all.
It’s equally important to enable multi-factor authentication (MFA), particularly for email, banking, and workplace accounts.
MFA adds another layer of protection, making it more difficult for someone to access your account even if your password has been compromised. Whenever possible, choose phishing-resistant authentication methods, such as security keys.
Online Scams Don’t Look Like They Used To
You receive a text message saying a package couldn’t be delivered. It includes a link asking you to confirm your address.
At first glance, nothing seems particularly suspicious.
But the message could be a phishing attempt designed to steal your personal or financial information.
Thanks to artificial intelligence, scammers can now generate well-written messages, reproduce the visual identity of familiar organizations, and imitate certain characteristics of a person’s voice.
That means a message can look and sound legitimate while still being fraudulent.
Before clicking a link or sharing sensitive information, contact the organization directly through its official website or a phone number you already trust.
A habit developed in your personal life can also help prevent costly fraud at work.
Your Personal Phone Holds More Than Just Memories
Smartphones have become digital vaults.
They contain photos, private conversations, banking apps, email accounts, and sometimes access to company resources.
Yet many of us regularly postpone security updates.
These updates aren’t just about new features. They also fix vulnerabilities that cybercriminals could exploit.
Enabling automatic updates, using a secure screen lock, and avoiding apps from untrusted sources are straightforward ways to reduce your exposure.
Don’t forget the other connected devices in your home, including routers and family computers.
What You Share Online Can Be Valuable to Scammers
A LinkedIn post announcing a promotion, a vacation photo, or a comment mentioning your manager might seem harmless.
However, cybercriminals can use publicly available information to prepare targeted scams.
For example, an attacker might research a company’s employees, reporting relationships, and suppliers to make a fraudulent request appear more credible.
You don’t need to stop using social media. Simply review your privacy settings and think carefully about the information you make publicly available.
At Work: Cybersecurity Is a Shared Responsibility
When Personal Tools and Business Data Overlap
Hybrid work has made our lives more flexible. We can check email remotely, collaborate on shared documents, and access business applications from almost anywhere.
But that convenience comes with responsibilities.
Forwarding a confidential document to a personal email address, accessing sensitive files from a shared family computer, or uploading business information to an unapproved application can bypass company security controls.
Employees should use approved devices and tools, including Microsoft 365, OneDrive, and SharePoint when these platforms are properly configured and managed.
The same caution applies to artificial intelligence tools.
Uploading client information or internal company documents to an unauthorized personal AI assistant may create privacy and confidentiality risks.
An Urgent Request Deserves a Moment of Verification
Imagine an accounting employee at a Quebec City business receiving an email that appears to come from the company’s CEO.
The message asks them to urgently update a supplier’s banking information before the next payment.
The tone is professional, the signature looks authentic, and the request seems reasonable.
But it could be an impersonation scam.
In situations like this, the safest response is to verify the request through a separate communication channel, using contact information you already know is legitimate.
This is especially important for wire transfers, banking changes, and requests involving confidential information.
A few minutes of verification could prevent significant financial losses.
Working Remotely Shouldn’t Mean Compromising Security
Working from home, a coworking space, or while travelling shouldn’t mean lowering your security standards.
An unlocked screen, a computer shared with family members, or an unsecured personal device can expose business information.
Organizations should establish clear policies covering approved devices, remote access, and document protection.
Employees can also develop simple habits: lock their screens when stepping away, use company-approved secure access methods, and avoid accessing sensitive business information from public computers.
The goal is to maintain consistent protection, wherever work happens.
Reporting a Security Incident Quickly Can Limit the Damage
Everyone makes mistakes.
Clicking a suspicious link, sending a document to the wrong recipient, or losing a device can happen even to careful employees.
What matters most is how quickly the situation is reported and addressed.
If something unusual happens, notify your IT department or managed IT service provider as soon as possible.
Early intervention may allow the team to disable compromised access, secure an account, or contain an incident before it spreads.
Organizations should also foster a workplace culture where employees feel comfortable reporting mistakes without automatically fearing blame.
A quick report can make a major difference.
Make Cybersecurity a Habit, Not Just an Annual Campaign
Cybersecurity Awareness Month is a great opportunity to bring teams together around better digital practices.
A short presentation about current scams, a phishing awareness exercise, or a review of account permissions can help employees strengthen their knowledge.
But cybersecurity awareness shouldn’t end on October 31.
Cyber threats continue to evolve, just like the way we work. Collaboration platforms, artificial intelligence, and connected devices create new opportunities, but they can also introduce new risks.
That’s why businesses benefit from making cybersecurity part of their everyday operations through regular reminders, clear procedures, and ongoing employee education.
It’s also important to remember that employee awareness is not a substitute for technical security controls.
Reliable backups, access management, software updates, system monitoring, and data protection measures remain essential.
The strongest defence combines informed employees, appropriate technology, and dependable IT support.
What If October Marked the Beginning of Better Habits?
Cybersecurity can sometimes feel complicated, but it often starts with simple decisions.
Choosing a unique password, enabling multi-factor authentication, questioning a suspicious message, or promptly reporting an unusual situation are all practical steps that help protect our digital lives.
And when these habits become second nature both at home and at work, their benefits extend far beyond individual protection.
This Cybersecurity Awareness Month, why not take a few minutes to review your digital habits and encourage the people around you to do the same?
At MYTECHNICIAN, we help Quebec SMBs protect their IT environments and strengthen their cybersecurity practices. Whether you’re looking to raise employee awareness, improve Microsoft 365 security, or assess your current security measures, our team can help you identify priorities and implement solutions tailored to your business.
Contact MYTECHNICIAN and make cybersecurity a year-round habit.
in your taskbar.