OCTOBER 2026 CYBERSECURITY AWARENESS MONTH OBSERVANCE

R 141622Z OCT 26
MARADMIN 496/26
MSGID/GENADMIN/CMC DC I IC4 WASHINGTON DC//
SUBJ/OCTOBER 2026 CYBERSECURITY AWARENESS MONTH OBSERVANCE//
POC/W. J. BUSH/CIV/UNIT: HQMC DCI IC4/DEPUTY DIRECTOR, CYBERSECURITY
AND COMPLIANCE BRANCH HEAD/TEL: 703-693-3490/EMAIL:
[email protected]//
POC/R. STATEN/CIV/UNIT: HQMC DCI IC4/CYBER STRATEGY/TEL: 571-256-8875/
EMAIL: [email protected]//
GENTEXT/REMARKS/1. This message announces observance of October 2026
as Cybersecurity Awareness Month. This observance provides an
opportunity for the Marine Corps Team to strengthen cybersecurity
readiness by promoting threat awareness, preventive behaviors, early
detection and reporting, resilient recovery, and continuous
improvement.
2. The 2026 Cybersecurity Awareness Month theme is "Securing the Next
250." The theme recognizes the need to build and sustain a secure,
resilient digital future. For the Marine Corps, cybersecurity is
essential to protecting the information, systems, and networks
that enable readiness, command and control, decision-making,
logistics, and mission execution.
3. The Marine Corps operates in a contested information environment
where adversaries seek opportunities to exploit vulnerabilities and
gain advantage. As the Marine Corps continues to modernize in support
of Force Design objectives, secure and resilient information systems
are essential to preserving the operational advantage required to
accomplish present and future missions. Cybersecurity is therefore a
readiness and force-protection responsibility.
4. The Marine Corps team includes Commanders, cybersecurity
professionals, and all authorized users of Marine Corps networks and
information systems. Commanders establish expectations, understand
cybersecurity risks, and ensure their organizations are prepared.
Cybersecurity professionals identify, assess, and address threats and
vulnerabilities. Other authorized users are a critical defensive
layer because their awareness and prompt reporting can provide early
indication that something is wrong. Together, the Marine Corps Team
strengthens cybersecurity protections and mission resilience.
5. Cybersecurity Awareness Month promotes prevention, early detection
prompt reporting, resilient recovery, and continuous improvement.
All personnel must protect information and credentials;
use Marine Corps systems, applications, and devices only
as authorized; comply with organization-provided authentication and
cybersecurity controls; accept authorized updates; and avoid actions
that bypass, disable, or diminish cybersecurity protections.
Personnel must remain alert to phishing, suspicious links and
attachments, unexpected removable media, abnormal system behavior,
unauthorized-access attempts, and other indicators of potential
compromise.
6. Emerging technologies increase the importance of disciplined
cybersecurity. Artificial intelligence can enable malicious actors
to identify vulnerabilities faster and create more convincing
phishing and social-engineering attempts. Future cryptographically
relevant quantum computers may also create risks to information
protected by current cryptography, including
Harvest Now, Decrypt Later threats in which adversaries collect
encrypted information for potential future decryption. To address
these emerging risks, the Department of War Chief Information
Officer, Honorable Kirsten Davies, released the Department of War
Post Quantum Cryptography Strategy, a comprehensive, forward-looking
plan to secure Department communications, data, and command and
control systems against future quantum computing capabilities.
Personnel should remain informed and comply with current Marine
Corps and Department of War cybersecurity guidance.
7. To support this effort, Commanders and cybersecurity
representatives are encouraged to implement or promote practical
activities during Cybersecurity Awareness Month that raise
awareness, reinforce understanding, assess compliance with
applicable policy, and strengthen operational resilience.
Recommended activities include:
a. Publish a commander message linking cybersecurity discipline
to unit readiness, Force Design, and mission continuity.
b. Conduct a weekly 10-15-minute cybersecurity awareness event
using locally approved materials. Suggested topics include phishing
detection, credential protection, multifactor authentication,
authorized system updates, and incident reporting.
c. Confirm local threat and incident-reporting procedures are
current, visible, and understood by all personnel, including
after-hours emergency escalation procedures.
d. Assess command operational resilience by reviewing
incident-response roles, critical-system dependencies, backup and
recovery status, and the viability of manual or alternate
mission-essential processes.
e. Use authorized phishing-awareness campaigns or tabletop exercises
to identify behavior and process gaps constructively, not to punish
personnel.
f. Recognize positive reporting behaviors, including the prompt
reporting of suspicious emails, potential credential exposure, lost
government mobile devices, and other possible cybersecurity incidents
8. Personnel who observe suspicious activity must promptly report it
through command-established procedures. For cyber incident reporting
guidance, contact the local Information System Security Manager,
Information System Security Officer, system administrator, network
administrator, service desk, or other command-designated reporting
point. Personnel should not independently investigate or remediate
a suspected cybersecurity incident unless directed by authorized
personnel.
9. Commands and cybersecurity representatives are encouraged to
leverage cybersecurity awareness resources, posters, and campaign
materials to support local training and awareness initiatives.
Additional information is available at:
a. Cybersecurity and Infrastructure Security Agency Cybersecurity
Awareness Month: https://www.cisa.gov/cybersecurity-awareness-month
b. National Cybersecurity Alliance: https://staysafeonline.org
c. National Institute of Standards and Technology Post-Quantum
Cryptography: https://www.nist.gov/pqc
d. National Security Agency Post-Quantum Cybersecurity Resources:
https://www.nsa.gov/Cybersecurity/Post-Quantum-Cybersecurity-
Resources/
e. Department of War Post Quantum Cryptography Strategy: https://
dowcio.war.gov/Portals/0/Documents/Library/DoW-PQC-Strategy.pdf
f. Personnel with valid Common Access Card credentials should also
consult command, component, and Marine Corps cybersecurity resources
for current reporting procedures, approved tools, and additional
guidance.
10. Cybersecurity Awareness Month is a call for sustained action.
Protect information, recognize threats, report suspicious activity,
support resilient recovery, and contribute to the security of the
information, systems, and networks essential to Marine Corps mission
accomplishment.
11. Release authorized by Lieutenant General J. A. MATOS,
Headquarters Marine Corps, Deputy Commandant for Information.//