Ask most business owners about cyber security and they'll talk about antivirus, firewalls, maybe a hacker in a hoodie. In the incidents we help clean up, the way in is usually much more ordinary. Someone clicked a link, used the same password everywhere, or paid an invoice that looked right. Your team's everyday habits matter more than any single product you can buy.

The habits that cause the most trouble

• Using the same password for work and personal accounts. When one website leaks it, every account with that password is open.

• Acting fast on an urgent email. Scam emails invent pressure, like an overdue bill, a parcel that can't be delivered, or the boss needing something done right now.

• Trusting the name on an email instead of the address it came from. Anyone can make an email show "Accounts" or your manager's name.

• Paying new bank details that arrived by email without ringing to check.

• Sharing one login between several people, so nobody can tell who did what.

Why careful people still get caught

Falling for a scam has nothing to do with intelligence. These scams are built around how busy people work. We move quickly, we run on autopilot, and we want to help. The criminal only needs one person to have one distracted moment.

Blaming that person afterwards doesn't help anyone. What helps is a set of habits and safety nets, so one bad click doesn't turn into a disaster.

Habits worth building

• Turn on the second login step, called MFA, for every account that offers it. If a password is stolen, the code on your phone still keeps the criminal out.

• Use a password manager. It creates and remembers a different strong password for every account, so nobody has to.

• Check any change of bank details by phone, on a number you already have. Never use the number in the email.

• Run short security training often. Ten minutes every month or two sticks better than an hour once a year.

• Make it safe to own up. The sooner someone says "I think I clicked something", the less damage there is to fix.

People and technology together

Technology still matters. Email filtering, updates and backups all cut the risk. But a team that stops before clicking, asks about odd requests and reports mistakes early will catch attacks that get past the software.

Elevated IT helps businesses across Lake Macquarie, Newcastle and the Central Coast with both halves, the technical protection and the habits. If you'd like a plain-English chat about where your team stands, call us on 1800 620 449.