Four Employee Habits That Create Cyber Risk (and How to Coach Them)

Most security incidents involve a person at some point: a click, a reused password, an unlocked laptop. That is not a reason to blame staff. It is a reason to understand the habits that create risk and to coach them. These four patterns show up in almost every office.

The skeptic

The skeptic believes attacks happen to other companies. Passwords stay the same for years and multi-factor authentication feels like a nuisance. Coaching works best with concrete local examples and a clear explanation that small businesses are targeted because they are easier to reach.

The procrastinator

The procrastinator means well but postpones updates, VPN connections and restarts. The fix is mostly technical: automatic patching, enforced restarts and managed devices remove the decision from the user.

The trusting colleague

This person leaves a laptop unlocked at lunch, uses free coffee-shop Wi-Fi or keeps passwords on sticky notes. Screen-lock policies, password managers and short reminders about public networks make safe behavior the easy option.

The well-intentioned expert

Even the person who follows every rule can be fooled by a well-made phishing message or a convincing voice call. Everyone benefits from a simple verify-first rule for payment changes and credential requests.

What helps all four

  • Regular security awareness training with realistic examples.
  • Simulated phishing messages followed by friendly coaching, not punishment.
  • Multi-factor authentication and managed patching so one mistake does less damage.
  • A clear, no-blame way to report something suspicious.

Platinum plans include staff security training and stronger email and phishing protection through INKY.

Related reading

Talk to a local team

PDX Information Technology Services provides managed IT, cybersecurity and compliance support for small businesses in Portland, Lake Oswego, Beaverton, Hillsboro and Vancouver, WA. Plans start at $100 per user per month (Gold) and $180 per user per month (Platinum). Call 971-331-4871 or book a free assessment.

Get In Touch

Share On Social Media

Other Recent Blog Articles

Shadow AI in Small Business: How to Find It and Fix It in 2026

October 13, 2026

Shadow AI is the AI your team already uses without IT knowing: personal ChatGPT accounts, free notetakers, and AI browser extensions. Here is how a Portland-area small business can find it without a witch hunt, give people a safer option, and lock down the risky parts in 30 days.

Restaurant QR Code Scams: How a Fake Menu Sticker Steals Your Card

October 13, 2026

At a lot of Portland restaurants these days, there’s no paper menu. You get a little QR code on a table tent, you scan it, and you order. It’s convenient,…

Hacked? What Portland CPAs, Financial Advisors, and Medical Offices Must Report After a Data Breach (and the Fines If You Don’t)

October 9, 2026

If you run a CPA firm, tax practice, financial advisory office, or medical clinic anywhere from Hillsboro to Gresham or Wilsonville to Vancouver, WA, a breach starts several reporting clocks…