It’s time to drive a rising tide

This article argues that improving cybersecurity requires simple, memorable guidance aimed at people rather than complex technical mandates, proposing four prioritized actions—update software, backup data, enable two-step authentication, and use password managers—and recommending messaging tactics (make it personal, emphasize safety over security, avoid buzzwords, and keep recommendations few and repeatable) to drive behavior change across individuals and organizations.