Cyber Readiness Institute
Welcome to the Cyber Readiness Institute weekly newsletter. By delivering short, no-jargon cybersecurity advice you can put to work immediately, we hope to help you build a resilient culture of cyber readiness—one tip at a time.
Over the first three weeks of Cyber Awareness Month, we locked our digital front doors, closed our open windows, and learned how to verify exactly who is knocking. Once the perimeter is secure, the next question is simple: where is your most valuable data stored, and how is it being protected? This week, we wrap up our campaign by tackling the final habit of the Core Four: Secure Storage & Sharing.
You wouldn’t leave your physical cash, tax documents, or family jewelry sitting out on the kitchen counter. You’d store them safely out of sight. But when employees save sensitive client data to their local desktops, share it via personal unencrypted cloud accounts, or pass it around on random promotional USB drives, they are doing the digital equivalent of leaving the cash on the front porch.
While USB drives may still be necessary for some business operations, they should never be the default method for storing or sharing sensitive information. This week, the goal is to move critical data out of isolated locations and into approved, secure storage systems.
Here is your leadership plan for this week:
The Problem: Employees default to saving files on their desktop or using random flash drives because it is fast and convenient. They don’t realize that if their laptop is lost, stolen, or hacked, that locally stored data is instantly compromised.
Your Action (Monday or Tuesday): Send this quick message in your team chat or email:
“Hey team! For our final week of Cyber Awareness Month, we are talking about where our data lives. Storing files on your local desktop or using random USB drives is like leaving company files on a park bench. While we know USBs are sometimes necessary for specific jobs, our default must always be our secure company cloud. Let’s make sure all our important work is safely inside the vault this week.”
The Problem: People get attached to their personal filing systems and “junk drawer” flash drives. You need an agreement to standardize how data moves inside and outside the company.
Your Action (Wednesday): At the end of a scheduled meeting, secure a collective agreement:
“To make sure we don’t accidentally lose or expose client data, let’s agree to a new standard. Can we make a pact that we will stop using personal, unapproved USB drives entirely? If a project absolutely requires a physical drive, we will only use company-approved, scanned media. Otherwise, all files go through our secure shared folders. Are we all on board?”
Why it works: It doesn’t ban the USB entirely; it simply removes the routine, casual use of unvetted physical media and sets a clear, professional boundary.
The Problem: When an employee needs to send a large file to a vendor quickly, they will grab whatever tool is closest—unless they have a pre-loaded habit.
Your Action (Friday): Give your team a frictionless behavioral loop to ensure secure sharing becomes the default reflex:
“IF I need to share a sensitive file, THEN I will use our secure company cloud link. IF a physical drive is strictly required, THEN I will only use a company-issued, approved USB.”
Following our September scorecard, keep your metrics simple and conversational:
On Friday afternoon, look at your company’s shared cloud drive (like Google Drive, OneDrive, or SharePoint) or ask the team: “Who successfully moved a local desktop file or an old USB folder into our secure cloud drive this week?”
Your metric is simply seeing active cloud folders being updated, proving that data is being stored where it can be centrally backed up and protected
A locked door doesn’t matter if your data is already sitting outside the house. By guiding your team through Awareness, Commitment, and Action this week, you establish a standard where your data is centrally protected, and physical media is used safely and deliberately.
Congratulations! By actively leading your team through the Core Four habits this month, you have moved beyond “check-the-box” compliance. You haven’t just taught your team about cybersecurity—you have built an active, preventative culture. Let’s keep these habits alive all year round.
CRI is releasing an updated version of its flagship Cyber Readiness Program. This free online program and companion Playbook help the Cyber Leader take practical steps to build a culture of cyber readiness. A new free Cyber Readiness Essentials is being released to educate employees and sole proprietors about the Core Four. Our November newsletters will highlight the exciting new features.
Download the Playbook, and get your copy of the Playbook Guide to start planning today.
Sign up for the Cyber Readiness Institute newsletter to receive weekly briefings like this one and stay up to date on practical, no-jargon cybersecurity guidance.
The Cyber Readiness Institute (CRI) is an initiative that convenes business leaders from across sectors and geographic regions to share resources and knowledge that inform the development of free cybersecurity tools for small and medium-sized businesses. Advancing the cyber readiness of small and medium-sized businesses improves the security of global value chains.
© Copyright 2026 Cyber Readiness Institute, Inc.
Privacy Policy
By clicking this box you agree to our Cookie and Privacy Policy. The Cyber Readiness Institute uses cookies to ensure you get the best experience on our website. Learn more
We may request cookies to be set on your device. We use cookies to let us know when you visit our websites, how you interact with us, to enrich your user experience, and to customize your relationship with our website.
Click on the different category headings to find out more. You can also change some of your preferences. Note that blocking some types of cookies may impact your experience on our websites and the services we are able to offer.
These cookies are strictly necessary to provide you with services available through our website and to use some of its features.
Because these cookies are strictly necessary to deliver the website, refusing them will have impact how our site functions. You always can block or delete cookies by changing your browser settings and force blocking all cookies on this website. But this will always prompt you to accept/refuse cookies when revisiting our site.
We fully respect if you want to refuse cookies but to avoid asking you again and again kindly allow us to store a cookie for that. You are free to opt out any time or opt in for other cookies to get a better experience. If you refuse cookies we will remove all set cookies in our domain.
We provide you with a list of stored cookies on your computer in our domain so you can check what we stored. Due to security reasons we are not able to show or modify cookies from other domains. You can check these in your browser security settings.
We also use different external services like Google Webfonts, Google Maps, and external Video providers. Since these providers may collect personal data like your IP address we allow you to block them here. Please be aware that this might heavily reduce the functionality and appearance of our site. Changes will take effect once you reload the page.
Google Webfont Settings:
Google Map Settings:
Google reCaptcha Settings:
Vimeo and Youtube video embeds:
