Cyber Awareness Month 2026: This Year We're Teaching One Habit, Not Twenty

Every October, security teams face the same problem: people already know what phishing is. Two thirds of us are confident we can spot a fake email. Fewer than half of us actually check it or report it. Eighty-three percent said last year's training was useful, and still didn't change what they do. That's not an awareness gap. It's a doing gap, and no amount of extra knowledge closes it.

So this Cyber Awareness Month, ICA Consultancy isn't asking you to remember twenty threats. We're asking for one habit, practised in five different situations across October: prove it. Before you act on a message, a call or a request, check it's genuinely what it claims to be, through a second channel you chose yourself, not the one the sender handed you. Ring the number you already had. Open the site yourself. Ask the person face to face.

Why this, and why now: the two most economically damaging cyber attacks in UK history didn't start with clever code. The Jaguar Land Rover attack is assessed at £1.9bn and hit over 5,000 UK organisations; Marks & Spencer's was linked to social engineering of a third-party IT service desk. Both started with someone being persuaded, not something being hacked. That's the uncomfortable finding, and the hopeful one, because the fix doesn't need a technical team. It needs everyone to check.

Over the next four weeks we'll take that habit somewhere new each time: proving the sender, the request, the source, and what to do the moment it goes wrong. Start now by finding out your own answer to the one question all of this depends on, if something looks off, do you actually know how to report it, and to whom?

Read more on our site: Cyber Security Awareness Month 2026 Theme: teach a decision, not a fact and Almost Two Thirds of Medium UK Businesses Were Breached Last Year.

Talk to us: if October is when you'd rather have this run for you — training, phishing simulation and reporting workflows in one place, see our Culture360° managed security awareness service.

Get the guide: the full CAM26 “Prove It” pack is free to download. Get the CAM26 guide.