A one-hour security training once a year is forgotten by February. Ten minutes a month works better. Short, regular sessions keep security in people’s minds, and each one can focus on a single habit. Here is a 12-month plan you can copy, plus the simple habits that should run all year.
The 12-month plan
Q1: Phishing and MFA
- January: spotting phishing emails. Urgency, deadlines and sign-in pages that appear after clicking a document link are the classic warning signs.
- February: MFA and approval fatigue. Never approve a sign-in request you didn’t start.
- March: passwords and password managers.
Q2: Data and sharing
- April: sharing files safely, and why “anyone with the link” is risky.
- May: personal data and DPDP basics.
- June: working from home and public Wi-Fi.
Q3: Scams and fraud
- July: invoice and payment fraud, including “new bank details” emails.
- August: fake calls and WhatsApp scams.
- September: USB drives and unknown devices.
Q4: AI and devices
- October: using AI tools safely, without pasting company data into free tools.
- November: lost or stolen devices.
- December: holiday and sale scams.
How to run each session
- Keep it to ten minutes: one real-looking example, one rule, one action.
- Put it in the calendar for the same week every month, so it becomes routine.
- Run a phishing simulation each quarter to see what’s sticking, and share the results with the whole team, not just management.
- Make reporting easy. In Microsoft 365, staff can use the Report button in Outlook to flag suspicious emails.
Habits for every month: lock your screen and keep a clean desk
The easiest security habit costs two keys: Windows + L. An unlocked screen gives anyone walking past your email, your files, your Teams chats and every system you’re signed in to. Visitors, delivery staff, a curious colleague: no hacking needed.
- Lock your screen every time you stand up: Windows + L, or Control + Command + Q on a Mac.
- Set screens to lock automatically after five minutes.
- Keep passwords, client documents and ID copies off the desk.
Getting started
Put January’s topic in the calendar today, choose who will run the sessions, and decide when the first phishing simulation will happen. The plan works best when leaders join in too: security culture starts with the people at the top.
How Pentacle IT Solutions can help
Pentacle IT Solutions helps businesses in Lucknow and across Uttar Pradesh with the technical side of security that backs up good habits: MFA, email protection, endpoint security and Microsoft 365 settings. See our cybersecurity services.
