As of: 30 Sep 2026
Summary
For European Cybersecurity Month, ENISA highlights knowledge and preparedness at work.
What happened?
For European Cybersecurity Month, ENISA highlights knowledge and preparedness at work. Its publication addresses phishing, fraud and employees' ability to report suspicious activity.
Why does it matter?
Many incidents start by deceiving people, not with a technical flaw. Workplace preparedness can reduce this risk.
Who is most affected?
Especially small businesses without a security department, but also individuals using the same devices for work and home.
What does it mean for businesses?
A short practical exercise with a clear reporting route can be more useful than a confusing collection of rules. At home, use the occasion for a shared account and device security check.
What can you do now?
- 1Define a simple route for reporting suspicious messages
- 2Run a 15-minute phishing exercise with the team
- 3At home, do a joint account and device check
Editorial assessment
Our conclusion
For small businesses the main takeaway is that a clear reporting route and short, regular exercises achieve more than extensive rulebooks. The awareness month is a good occasion to set both up concretely.
Source
ENISA · Source date
Status / reviewed on: