Simple steps to protect your people and your business

Cybersecurity isn’t just an IT problem it’s a people problem. More than 90% of cyber attacks begin with a human mistake, often a single careless click. And while antivirus software and firewalls are important, your first and best line of defence are your employees.

At Pact IT Solutions, we help businesses strengthen their security from the inside out starting with awareness. Below are 10 cyber rules every employee should know and follow.

1. Think Before You Click

Why it matters: Phishing emails are still the number one cause of breaches.

Cybercriminals are crafty, they disguise malicious emails to look like they’re from your boss, a supplier or even a well-known brand. Teach your team to slow down, inspect links and never click unless they’re 100% sure.

✔️ Tip: If an email feels off, it probably is.

2. Use Strong, Unique Passphrases

Why it matters: Weak or reused passwords make you an easy target.

A strong passphrase is long (at least 16 characters), easily remembered by you, and never reused across accounts. Avoid names, birthdays or anything guessable.

✔️ Tip: Use a trusted password manager to keep track.

3. Turn On Multi-Factor Authentication (MFA)

Why it matters: MFA stops 99.9% of common cyber attacks.

Even if someone steals your password, MFA adds another barrier. It’s one of the simplest and most effective security steps you can take.

✔️ Tip: Enable MFA on email, cloud apps, and anywhere you log in.

4. Lock Your Screen When You Leave

Why it matters: Unattended devices are open doors.

Whether you’re grabbing a coffee or heading to a meeting, always lock your screen. It takes two seconds and can stop someone from accessing sensitive data.

✔️ Tip: Set your device to auto-lock after a short period of inactivity. 

5. Keep Software Updated

Why it matters: Outdated apps are full of security holes.

Hackers love vulnerabilities in old software. Updates often fix these so stop hitting “remind me later” and update regularly.

✔️ Tip: Enable automatic updates wherever possible.

6. Only Use Approved Tools and Apps

Why it matters: Shadow IT creates invisible risks.

Using personal file-sharing apps or unknown software at work can bypass company protections. Stick to tools your IT team has approved.

✔️ Tip: Not sure what’s okay to use? Ask before you install. 

7. Be Wary of Public Wi-Fi

Why it matters: It’s easy to snoop on open networks.

Public Wi-Fi (like cafes, airports, and hotels) can be a hacker’s playground. Always use a secure VPN to protect your connection.

✔️ Tip: If you don’t have a VPN, ask IT to set one up for remote work.

8. Don’t Share Credentials, Ever

Why it matters: One login = total access.

No matter how trusted someone seems, never share passwords. If accounts need shared access, use secure password-sharing tools or talk to IT.

✔️ Tip: If you share it, you’re responsible for it. 

9. Report Anything Suspicious Immediately

Why it matters: Early action can stop serious damage.

If you think you clicked something dodgy or notice unusual activity, report it right away. Delaying gives threats more time to spread.

✔️ Tip: Your IT team would rather get a false alarm than miss a real threat.

10. Stay Informed

Why it matters: Cybersecurity is always evolving.

Threats change fast so stay up to date with company policies, alerts and training. Security isn’t just IT’s job, it’s everyone’s responsibility.

✔️ Tip: Consider a regular cybersecurity refresher for your team.

Build a Stronger Security Culture, From the Inside Out

These 10 rules are simple but when followed company-wide form a powerful defence. At Pact IT Solutions, we work with organisations of all sizes to protect their data, train their teams and build a culture of cyber safety.

Get in touch today

Learn how Pact IT Solutions can help your staff stay one step ahead of cyber threats. Contact us today and we'll help you protect your people and your data.