MARADMIN 496/26
OCTOBER 2026 CYBERSECURITY AWARENESS MONTH OBSERVANCE
R 141622Z OCT 26 MARADMIN 496/26 MSGID/GENADMIN/CMC DC I IC4 WASHINGTON DC// SUBJ/OCTOBER 2026 CYBERSECURITY AWARENESS MONTH OBSERVANCE// POC/W. J. BUSH/CIV/UNIT: HQMC DCI IC4/DEPUTY DIRECTOR, CYBERSECURITY AND COMPLIANCE BRANCH HEAD/TEL: 703-693-3490/EMAIL: [email protected]// POC/R. STATEN/CIV/UNIT: HQMC DCI IC4/CYBER STRATEGY/TEL: 571-256-8875/ EMAIL: [email protected]// GENTEXT/REMARKS/1. This message announces observance of October 2026 as Cybersecurity Awareness Month. This observance provides an opportunity for the Marine Corps Team to strengthen cybersecurity readiness by promoting threat awareness, preventive behaviors, early detection and reporting, resilient recovery, and continuous improvement. 2. The 2026 Cybersecurity Awareness Month theme is "Securing the Next 250." The theme recognizes the need to build and sustain a secure, resilient digital future. For the Marine Corps, cybersecurity is essential to protecting the information, systems, and networks that enable readiness, command and control, decision-making, logistics, and mission execution. 3. The Marine Corps operates in a contested information environment where adversaries seek opportunities to exploit vulnerabilities and gain advantage. As the Marine Corps continues to modernize in support of Force Design objectives, secure and resilient information systems are essential to preserving the operational advantage required to accomplish present and future missions. Cybersecurity is therefore a readiness and force-protection responsibility. 4. The Marine Corps team includes Commanders, cybersecurity professionals, and all authorized users of Marine Corps networks and information systems. Commanders establish expectations, understand cybersecurity risks, and ensure their organizations are prepared. Cybersecurity professionals identify, assess, and address threats and vulnerabilities. Other authorized users are a critical defensive layer because their awareness and prompt reporting can provide early indication that something is wrong. Together, the Marine Corps Team strengthens cybersecurity protections and mission resilience. 5. Cybersecurity Awareness Month promotes prevention, early detection prompt reporting, resilient recovery, and continuous improvement. All personnel must protect information and credentials; use Marine Corps systems, applications, and devices only as authorized; comply with organization-provided authentication and cybersecurity controls; accept authorized updates; and avoid actions that bypass, disable, or diminish cybersecurity protections. Personnel must remain alert to phishing, suspicious links and attachments, unexpected removable media, abnormal system behavior, unauthorized-access attempts, and other indicators of potential compromise. 6. Emerging technologies increase the importance of disciplined cybersecurity. Artificial intelligence can enable malicious actors to identify vulnerabilities faster and create more convincing phishing and social-engineering attempts. Future cryptographically relevant quantum computers may also create risks to information protected by current cryptography, including Harvest Now, Decrypt Later threats in which adversaries collect encrypted information for potential future decryption. To address these emerging risks, the Department of War Chief Information Officer, Honorable Kirsten Davies, released the Department of War Post Quantum Cryptography Strategy, a comprehensive, forward-looking plan to secure Department communications, data, and command and control systems against future quantum computing capabilities. Personnel should remain informed and comply with current Marine Corps and Department of War cybersecurity guidance. 7. To support this effort, Commanders and cybersecurity representatives are encouraged to implement or promote practical activities during Cybersecurity Awareness Month that raise awareness, reinforce understanding, assess compliance with applicable policy, and strengthen operational resilience. Recommended activities include: a. Publish a commander message linking cybersecurity discipline to unit readiness, Force Design, and mission continuity. b. Conduct a weekly 10-15-minute cybersecurity awareness event using locally approved materials. Suggested topics include phishing detection, credential protection, multifactor authentication, authorized system updates, and incident reporting. c. Confirm local threat and incident-reporting procedures are current, visible, and understood by all personnel, including after-hours emergency escalation procedures. d. Assess command operational resilience by reviewing incident-response roles, critical-system dependencies, backup and recovery status, and the viability of manual or alternate mission-essential processes. e. Use authorized phishing-awareness campaigns or tabletop exercises to identify behavior and process gaps constructively, not to punish personnel. f. Recognize positive reporting behaviors, including the prompt reporting of suspicious emails, potential credential exposure, lost government mobile devices, and other possible cybersecurity incidents 8. Personnel who observe suspicious activity must promptly report it through command-established procedures. For cyber incident reporting guidance, contact the local Information System Security Manager, Information System Security Officer, system administrator, network administrator, service desk, or other command-designated reporting point. Personnel should not independently investigate or remediate a suspected cybersecurity incident unless directed by authorized personnel. 9. Commands and cybersecurity representatives are encouraged to leverage cybersecurity awareness resources, posters, and campaign materials to support local training and awareness initiatives. Additional information is available at: a. Cybersecurity and Infrastructure Security Agency Cybersecurity Awareness Month: https://www.cisa.gov/cybersecurity-awareness-month b. National Cybersecurity Alliance: https://staysafeonline.org c. National Institute of Standards and Technology Post-Quantum Cryptography: https://www.nist.gov/pqc d. National Security Agency Post-Quantum Cybersecurity Resources: https://www.nsa.gov/Cybersecurity/Post-Quantum-Cybersecurity- Resources/ e. Department of War Post Quantum Cryptography Strategy: https:// dowcio.war.gov/Portals/0/Documents/Library/DoW-PQC-Strategy.pdf f. Personnel with valid Common Access Card credentials should also consult command, component, and Marine Corps cybersecurity resources for current reporting procedures, approved tools, and additional guidance. 10. Cybersecurity Awareness Month is a call for sustained action. Protect information, recognize threats, report suspicious activity, support resilient recovery, and contribute to the security of the information, systems, and networks essential to Marine Corps mission accomplishment. 11. Release authorized by Lieutenant General J. A. MATOS, Headquarters Marine Corps, Deputy Commandant for Information.//