Cybersecurity Awareness: Cyber Hygiene

In this next topic in the cybersecurity awareness series, we look at cyber hygiene: the small, regular habits that help keep your personal and work digital life more secure.

Quick takeaway

Section	Key message
What it is	Cyber hygiene is the routine care of your digital assets, including accounts, devices, apps, and information.
Why it matters	Small gaps, such as weak authentication or outdated software, combine to create easy opportunities for attackers.
What to do	Strengthen sign-ins, keep systems updated, reduce unnecessary access and exposure, and stay alert to social engineering.
What not to do	Cyber hygiene is your part in everyday security, not a replacement for broader tools, controls, and awareness.

Key definitions

Term	Meaning
Access	The ability to view or use systems, apps, or data
Authentication	How you sign in and prove who you are
Exposure	How much opportunity there is for something to go wrong or for others to gain access
Gaps	Small weaknesses, like outdated software or poor sign-in practices
Multi-factor authentication (MFA)	An extra step to confirm your identity when signing in
Risk	The chance something could go wrong, such as unauthorised access or data loss
Social engineering	Attempts to trick you into giving access or information

What it is

Cyber hygiene is the ongoing care of your digital environment. Like personal hygiene, it is a set of simple, repeatable habits that help secure your digital assets such as accounts, devices, and information.

These habits apply both at work and at home, helping protect everything from business systems to your personal accounts and devices.

Why it matters

Many cyber incidents begin with small, preventable gaps.

For example:

• A reused or stolen authentication method can allow access to other accounts

• Outdated software can be used to compromise your devices

• An unexpected message or prompt may be a malicious attempt to gain access

• An overly shared or unrestricted storage location can expose information to others
  

Individually these may seem minor, but together they create easy opportunities for attackers.

What to do

Focus on a few consistent, high-impact habits:

Secure how you sign in

• Use modern, secure authentication such as passkeys or security keys where available. Otherwise, enable multi-factor authentication (MFA)

• Periodically review and remove old and weak authentication methods

• When using passwords, use a password manager to create and store unique passwords for each system

• Periodically review your logins and report suspicious activity promptly
  

Reduce your exposure

• Keep devices and applications updated, and restart them regularly

• Only install apps, software, and extensions (e.g. browser extensions) from trusted sources

• When sharing files, share directly to the required people and use modern methods (e.g. Dropbox or SharePoint) which allow you to regularly review and remove access

• Regularly review your apps, connected services (e.g. AI access to your email), and devices

• Remove apps, data, accounts, devices, or access that is no longer needed
  

Protect your device

• Physically secure your device, including locking it when not in use
  

Stay alert to social engineering

• Be sceptical of unsolicited contact, not just email. Social engineering can happen via job ads, social media, phone calls, or even in person

• Always verify unusual requests independently using a trusted source, such as an official website or known phone number

• Stop and think before approving authentication prompts, permissions, or access requests. If unexpected or unsolicited, reject and report it
  

The goal is not perfection, but consistent habits over time.

What not to do

Cyber hygiene is not the full picture, it is your part in the day-to-day use of these systems.

These habits help reduce everyday risk, but they do not replace broader security tools, controls, or awareness across your work and personal digital life.

Always understand your organisation’s and personal security requirements, and where uncertain, seek guidance from an IT professional.

Takeaway

Cyber hygiene is about building simple, repeatable habits that reduce everyday risk.

Small habits. Strong security.