North Carolina Declares Cybersecurity Awareness Month Amid Rising Online Threats

What Happened

North Carolina Governor Josh Stein has officially declared October as Cybersecurity Awareness Month, urging residents to prioritize online safety. This announcement comes as the state grapples with an increase in cybercrime, with North Carolinians losing over $324 million to internet scams in 2024 alone, according to the FBI. The goal is to educate individuals and businesses on how to protect themselves from evolving digital threats.

Why It Matters

The proclamation highlights the urgent need for heightened vigilance in the face of increasingly sophisticated cyberattacks. N.C. Department of Information Technology (NCDIT) Secretary Teena Piccione emphasized the importance of understanding how to navigate the digital landscape safely, especially with the rise of generative AI and other new technologies. Cyber threats aren't just a nuisance; they represent significant financial and personal risks to individuals and the state's economy.

Key Tips for Staying Safe Online

The state is promoting several key strategies for staying safe online. This includes using strong, unique passwords managed by a password manager. Enabling multi-factor authentication, which adds an extra layer of security, can reduce the risk of hacking by 99%. Keeping devices and software updated is also crucial, as updates often include security patches that address known vulnerabilities. Governor Stein’s administration also wants to remind people to think before they click any links, as this is a favorite vector for phishing scams.

Traveling or using public Wi-Fi? Be extra careful. Avoid public charging stations, and if you must use public Wi-Fi, consider using a Virtual Private Network (VPN) to encrypt your data. The state also cautions against sharing personal or financial information with publicly available artificial intelligence platforms, as these inputs can be used for malicious purposes.

NCDIT's Strategic Plan

The NCDIT is implementing a five-year cybersecurity strategic plan to bolster the state's defenses. This plan focuses on stronger governance, expanded partnerships across government, education, and the private sector. It also seeks to modernize North Carolina's cybersecurity workforce through initiatives like a new cybersecurity internship program, aiming to build a robust talent pipeline.

Our Take

While Cybersecurity Awareness Month is a good start, it’s crucial to recognize that cybersecurity isn't a one-month concern. It's an ongoing battle that requires continuous education and adaptation. The initiative's success hinges on how effectively it can translate awareness into lasting behavioral changes among residents and businesses. It's not enough to simply tell people to use strong passwords; they need to understand why it matters and how these measures protect them in practical terms.

One area of concern is the increasing sophistication of AI-driven scams. The ability of scammers to generate realistic video and audio communications makes it harder than ever to distinguish between genuine and fraudulent interactions. This requires a shift towards a more critical and skeptical approach to online communications.

Resources and Support

To aid North Carolinians in navigating the digital world, NCDIT's Division of Broadband and Digital Opportunity has launched the Tech Resource Finder, a website offering access to over 2,100 resources. This includes technical support and digital skills classes. Additionally, residents can call NC 211 for assistance, including digital skills assessments and guidance on accessing computer skills classes. This shows a commitment to helping get North Carolinians of all backgrounds online.

Implications and Takeaways

North Carolina's Cybersecurity Awareness Month underscores the growing importance of digital safety in an interconnected world. The state's multi-faceted approach, combining awareness campaigns with strategic investments in cybersecurity infrastructure and workforce development, offers a model for other states facing similar challenges. The key takeaway is that cybersecurity is a shared responsibility, requiring proactive measures from individuals, businesses, and government agencies alike. Ignoring the problem is no longer an option; the financial and personal costs are simply too high.