Build your cybersecurity habits like an exercise routine: small actions, every day

Article written by Dan Whitty, Senior Information Security Manager at Award Force.

Cybersecurity is more like fitness than you think.

We all know the saying: “An apple a day keeps the doctor away.” It’s a reminder that small, everyday habits, not grand one-off actions, are what keep us healthy in the long run.

Security is no different. The truth is, it’s not about being the strongest, smartest or most technical person. It’s about everyone on a team working together, so safe habits become second nature. And, when each person raises their game just a little, the whole team rises to help protect and keep organisations and their clients’ data safe.

In celebration of Cybersecurity Awareness Month, consider adding these best practices to your everyday routine.

8 security habits every business user should adopt

Enable multi-factor authentication (MFA): the push-up

A foundational move that builds core strength. Simple, effective, and should be part of everyone’s routine. At Award Force, we support MFA to add additional layers of security to your account. When enabled, it adds a second verification method using an authenticator app or SMS.

Use a password manager: deadlifts

Let a password manager (we use 1Password) do the heavy lifting for you. With proper form, it takes the strain off your memory while keeping you strong. No more having to remember all those passwords—and absolutely no more password1234.

Lock your device: planks

Quick, low effort, but builds discipline. Even a short hold protects your core.

Update software: drinking water

Keeps your system hydrated and functioning. Skip it, and you’ll run into cramps (or vulnerabilities). Old and outdated software is vulnerable to hackers and cyber criminals, so it’s important to check your software often for updates.

Share files intentionally: “spotting” a teammate

Be deliberate and controlled when sending files, and make sure you’re not putting anyone at risk of dropping the weight.

Clean up old access: keep mobile and limber

Clears out tightness and makes sure your “muscles” (systems) move safely. Neglect it, and problems creep in later.

Report suspicious emails: call out bad form

If you see someone doing something unsafe, don’t ignore it. Speaking up protects everyone–you, your company and your clients. We use a training system called Hoxhunt, which gamifies security training for employees, teaching us how to recognise phishing emails and bad actors.

Stay aware and curious: consistency in training

Security, like fitness, isn’t one big training session; it’s about showing up regularly and building strength over time. Be aware of shady emails; know how to spot phishing attempts and scams. Ask questions. Show up; be consistent, day after day.

At Award Force, we take protecting client data seriously. Security controls, audits and policies are part of our regular practices. You can learn about our training plans (and how we help protect your data) by visiting our Trust Centre.

But just as in fitness, the real strength comes when everyone contributes. By adopting these small, everyday habits, you’re not just protecting yourself, you’re also helping to keep the entire team strong, resilient and ready for whatever comes.