So, bottom line, employers, make sure your staff is getting the best training available. Consider rewarding people who take it seriously( because positive reinforcement works better than doom-scrolling and is cheaper than a breach). Employees: please don’ t let all the videos and“ gotcha” test emails numb you to what’ s really going on. No matter how many software tools are used to keep your job safe, only humans can prevent“ human error.” If it feels even a little off for any reason, stop and ask for someone to take a look. •
ARE YOU ASKING YOUR
CYBERSECURITY
They came from the real DocuSign, passed authentication, and matched real business workflows. The failure point wasn’ t technology; it was trust.( And trust, unfortunately, doesn’ t come with a spam filter.)
So, what does this mean? Even though we’ re all tired of hearing about cybersecurity and awareness training, the consequences of not paying attention are very real. Topeka has already seen serious cyber threats in government and healthcare over the last few years— and that doesn’ t even count the massive number of small businesses that have had their email and social media accounts hacked. How many people do you know who’ ve had to send the dreaded“ Please disregard” email( or post“ Do not reply to any messages from me”) because their account was taken over?
There are other ways companies get attacked, too. Imagine one of your smaller vendors doesn’ t pay attention, and their system gets compromised. Because the bad guys can see what’ s happening in their inbox, they can figure out who the invoices go to and what the emails are supposed to look like. Then- using your vendor’ s real email account- they send a message saying you haven’ t paid your bill and you can use this“ new payment portal” to get caught up so deliveries don’ t get interrupted. It looks legitimate and comes from the right person. It also arrives at the exact moment your brain is thinking,“ Please don’ t make me deal with this today.”
This email is from a company you already work with, from the person you normally work with, for products you normally buy. Again, the best way to stop something like this is to verify: call the company using contact information you already have( or look it up independently) and ask whether the new portal is legitimate. If nothing else, it’ s a great excuse to make a quick phone call instead of starting your day with an unexpected disaster.
All the cybersecurity tools in the world can’ t prevent attacks like this because these aren’ t“ fake emails.” They’ re real messages sent through real platforms.
These are situations where strong Security Awareness Training helps— by prompting people to pause, verify, and ask questions when they aren’ t 100 % certain. Even basic scam emails can look good with AI, and it only takes seconds.
So, bottom line, employers, make sure your staff is getting the best training available. Consider rewarding people who take it seriously( because positive reinforcement works better than doom-scrolling and is cheaper than a breach). Employees: please don’ t let all the videos and“ gotcha” test emails numb you to what’ s really going on. No matter how many software tools are used to keep your job safe, only humans can prevent“ human error.” If it feels even a little off for any reason, stop and ask for someone to take a look. •
Paul Smart is an Account Representative for Nex-Tech.
ARE YOU ASKING YOUR
IT VENDOR THE RIGHT
QUESTIONS? We Can Help!
nex-tech. com / business | 800-588-6649 sales @ nex-tech. com
Check out our Trust Center to see how we run our business.
SEPTEMBER / OCTOBER 2026
27