One of the most effective cybersecurity habits is also one of the simplest.

Pause.

When a message involves money, passwords, sensitive information, account access, unusual requests, or unexpected urgency, employees should stop before acting.

Ask:

Was I expecting this request?

Does the sender address look correct?

Is this normal for this person or vendor?

Am I being pressured to act quickly?

Does the request involve money, credentials, or sensitive information?

Can I verify the request another way?

A phone call, known contact number, separate email thread, or conversation with a manager can often confirm whether the request is legitimate.

Cybersecurity is often described in highly technical terms.

But sometimes a small behavioral change can prevent a major incident.

Awareness. Pause. Protect. Repeat.