Cybersecurity Awareness Month: Pause before you act.

October is Cybersecurity Awareness Month. Each week this month, the Digital Trust Hub is giving members a set of resources that encourage practical, everyday security habits among district staff. The first theme is Pause Before You Act, built on a simple routine: Pause. Verify. Report.

The week-one package helps employees understand why pausing matters, how to verify an unexpected request and how reporting a suspicious message protects their colleagues. Members received:

• A staff email template that explains the theme with examples and one practical action for employees to take this week, in Word and Google Docs formats
• A flyer for staff spaces, newsletters and digital displays, with messaging that works all year
• Phishing reporting guides for Microsoft 365 and Gmail, so a district can share the one that matches its email platform
• A phishing incident response checklist for the technology team

Plan for the click

Even with training and safeguards, some employees will click on a phishing message, especially as attacks become more realistic. The incident response checklist helps a district prepare for that moment with a consistent plan: protect accounts and information, support the employee and encourage prompt reporting without assigning blame. A calm response makes staff more comfortable asking for help, and it gives the technology team an earlier chance to act.

Leaders set the pattern

The package also asks district leaders to model communication habits that make legitimate requests easier to recognize. Announce changes early, give reasonable deadlines and avoid unexpected messages that pressure employees to act right away. Tell staff how to verify a technology request, and make clear that taking time to check is encouraged, even when a message appears to come from leadership.

Every piece is built to be adapted with a district’s own help desk contacts and reporting procedures. More themes follow each week through October.