Four Employee Habits That Create Cyber Risk (and How to Coach Them)

Last updated: October 19, 2026

Most security incidents involve a person at some point: a click, a reused password, an unlocked laptop. That is not a reason to blame staff. It is a reason to understand the habits that create risk and to coach them. These four patterns show up in almost every office.

The skeptic

The skeptic believes attacks happen to other companies. Passwords stay the same for years and multi-factor authentication feels like a nuisance. Coaching works best with concrete local examples and a clear explanation that small businesses are targeted because they are easier to reach.

The procrastinator

The procrastinator means well but postpones updates, VPN connections and restarts. The fix is mostly technical: automatic patching, enforced restarts and managed devices remove the decision from the user.

The trusting colleague

This person leaves a laptop unlocked at lunch, uses free coffee-shop Wi-Fi or keeps passwords on sticky notes. Screen-lock policies, password managers and short reminders about public networks make safe behavior the easy option.

The well-intentioned expert

Even the person who follows every rule can be fooled by a well-made phishing message or a convincing voice call. Everyone benefits from a simple verify-first rule for payment changes and credential requests.

What helps all four

• Regular security awareness training with realistic examples.
• Simulated phishing messages followed by friendly coaching, not punishment.
• Multi-factor authentication and managed patching so one mistake does less damage.
• A clear, no-blame way to report something suspicious.

Platinum plans include staff security training and stronger email and phishing protection through INKY.

Related reading

• managed cybersecurity for Portland businesses
• Why passwords are your business’s weakest point
• Defending against insider threats

Talk to a local team

PDX Information Technology Services provides managed IT, cybersecurity and compliance support for small businesses in Portland, Lake Oswego, Beaverton, Hillsboro and Vancouver, WA. Plans start at $100 per user per month (Gold) and $180 per user per month (Platinum). Call 971-331-4871 or book a free assessment.