An email lands in your inbox from a colleague. The tone is right. The signature looks genuine. Perhaps there is even a familiar face waiting for you in a Teams call. A few years ago, that might have been enough reassurance. Today, it isn't.

Every October, organisations around the world mark Cybersecurity Awareness Month. At Palladium, we do the same for a simple reason: cybersecurity has long been everyone's responsibility. But the rise of artificial intelligence has transformed how we work, collaborate and solve problems, and it has also transformed how criminals operate. According to Microsoft's Cyber Signals reporting, the company now blocks millions of cyber threats every day, with AI increasingly being used to create more convincing scams, phishing emails and impersonation attacks.

In the age of deepfakes and AI-generated content, technical controls alone are no longer enough. Awareness, vigilance and shared accountability matter more than ever.

Cybersecurity is Not an IT Function

At Palladium, we welcome new colleagues throughout the year. Awareness Month provides an additional and focused opportunity to reinforce a core part of our culture: cybersecurity is not something owned by the IT team alone. As I often tell colleagues, security is a business function. Just as we all share responsibility for serving clients, protecting sensitive information and representing Palladium professionally, we also share responsibility for keeping our organisation secure.

The strongest cybersecurity programme in the world can be undone by a single moment of misplaced trust. Equally, one employee recognising a suspicious email can prevent a significant incident.

AI Has Changed the Threat Landscape

Artificial intelligence is one of the most exciting technologies of our time. It is helping organisations improve productivity, accelerate analysis and unlock new opportunities. But cybercriminals are also enthusiastic adopters too and for all the benefits AI brings, it also introduces new risks.

Attackers can now generate highly personalised phishing emails in seconds. They can imitate writing styles, create convincing fake websites and produce synthetic audio and video that mimic real people. What once required significant effort can now be done at scale.

This is where human judgement becomes critical.

Increasingly, employees are confronted with messages that look polished, professional and legitimate.

You may think you know exactly who is on the other side of a message or a call. In reality, that certainty can no longer be taken for granted.

Creating Awareness Through Participation

The good news is that awareness works.

What makes me most proud during Palladium's Cybersecurity Awareness Month is not the content we share with our team, it’s how they engage with it.

Employees actively participate in phishing-spotting exercises, they review screenshots of suspicious emails and discuss why something doesn’t look right, they take part in polls, ask questions and share examples of potential threats they’ve encountered and each year, participation grows.

That tells me something important: people care about cybersecurity because they understand how closely it connects to their own work.

And perhaps even more importantly, they act on that understanding. I regularly see colleagues raise concerns about suspicious emails, unexpected requests or unusual activity. Often, they report issues before any harm has occurred. Many suggest sharing examples with the wider business so others can learn from them.

Those actions demonstrate a mature security culture far more effectively than any policy document ever could.

A Collective Responsibility

Cybersecurity Awareness Month is about building the confidence to pause, question and verify. Technology will continue to evolve, and impersonation attempts will become more convincing. Our strongest response is a workforce that knows that familiarity is not proof and feels empowered to act when something does not seem right.

Cybersecurity belongs to all of us, and the most effective defence against modern cyber threats is a workforce that understands its role in protecting the organisation. Our culture around that principle continues to grow stronger each year, and that gives me confidence for whatever comes next.