十月网络安全宣传月进入第23年：CISA主题「守护下一个250年」，官方四项基本防护动作公布
华盛顿——10月是美国「网络安全宣传月」（Cybersecurity Awareness Month）。据美国网络安全与基础设施安全局（CISA）官网公布的2026年宣传月工具包，今年是这项全国性宣传活动第23年，CISA的主题为「守护下一个250年」（Securing the Next 250），呼应美国建国250周年，重点放在支撑关键基础设施的政府与私营部门组织——保障供电、供水等关键服务不中断。全国网络安全联盟（NCA）同期的宣传主题为「别让他们轻易得手」（Don't Make It Easy for Them）。
CISA公布的四项基本防护动作是：识别并报告钓鱼信息；使用强密码并借助密码管理器；开启多因素认证（MFA）；及时更新软件。面向企业和机构，CISA还列出要求登录访问、备份数据、加密数据、制定事件响应预案、向CISA报告网络事件等进一步措施。
宣传月自2004年发起，由CISA与全国网络安全联盟共同推动，每年10月1日至31日举行。CISA在工具包中表示，关键基础设施的运营者、供应者与支持者处在抵御网络入侵的第一线，今年的活动就是向这些组织和负责人发出的行动呼吁。（来源：CISA 官网 Cybersecurity Awareness Month Toolkit、全国网络安全联盟2026年宣传资料）
October Is Cybersecurity Awareness Month for the 23rd Year: CISA's Theme Is 'Securing the Next 250'
WASHINGTON — October is Cybersecurity Awareness Month in the United States. According to the Cybersecurity and Infrastructure Security Agency's (CISA) official 2026 toolkit, this is the campaign's 23rd year. CISA's theme is 'Securing the Next 250,' tied to the nation's 250th anniversary and focused on the government and private-sector organizations that support critical infrastructure — keeping the lights on, the water running and other vital services available. The National Cybersecurity Alliance's companion theme this year is 'Don't Make It Easy for Them.'
CISA's four core actions are: recognize and report phishing; use strong passwords with a password manager; turn on multifactor authentication; and keep software updated. For businesses and organizations, CISA lists additional steps including requiring strong passwords and MFA for all users, teaching employees to avoid phishing scams, backing up and encrypting data, maintaining an incident response plan, and reporting cyber incidents to CISA.
The awareness month, held every Oct. 1–31 and first launched in 2004, is led by CISA and the National Cybersecurity Alliance. CISA describes this year's campaign as a call to action for organizations and leaders who own, operate, supply or otherwise support the nation's vital services. (Sources: CISA Cybersecurity Awareness Month Toolkit; National Cybersecurity Alliance 2026 campaign materials)
图片来源：网络安全演练现场，公有领域（美国海军照片，Wikimedia Commons）
