Every phishing attack has one aim: to get you to act before you think.
It could be a fake delivery notification, a message from a “relative” in trouble, or a cleverly worded email impersonating a colleague. These attacks might come via email, text, WhatsApp or social media—but what links them is pressure. Pressure to act fast. Pressure to hand over information or money. Pressure that can compromise not just data, but trust.
As OCS Group Chief Information Security Officer Neil Weller explains:
“Phishing is a form of fraud. The methods change, but the motivation is financial. Criminals use social engineering to exploit fear, urgency or curiosity—whatever it takes to lower your guard.”
From Technology to Psychology
Cybersecurity is often thought of as a technical discipline. But as Neil puts it, “A strong cyber culture relies on people, not just systems.” That’s why OCS takes a human-led approach to resilience—equipping colleagues with the confidence to question what doesn’t feel right and the tools to respond.
It’s also why we’re launching the Cyber Champions initiative this Resilience Week. Cyber Champions is a colleague empowerment programme to embed cyber awareness into the day-to-day fabric of frontline contracts and business units.
“We’re inviting colleagues across the business to volunteer as Cyber Champions,” says Neil. “These individuals will receive tailored training and support, acting as local points of contact for advice and awareness. It’s about giving people the power to protect themselves and their teams.”
Introducing the STOP Model
OCS’s internal campaigns promote a simple but powerful behaviour model: STOP.
- Stop: Take a moment before you act.
- Think: Does this message seem unusual or suspicious?
- Observe: Are there red flags—like a rushed tone or a strange link?
- Protect: Reach out for advice before clicking or responding.
“The STOP model turns instinct into action,” Neil explains. “It’s a habit that builds everyday resilience—not just at work, but in people’s personal lives too.”
Cybercrime Is Big Business
The stakes are high. According to a report released by UK Finance, in 2024, criminals stole £1.17 billion from individuals and companies in the UK. Cyber-attacks are no longer the work of lone hackers, but rather organised operations—sometimes even state-sponsored groups—employing professionalised tactics to scam individuals and companies alike.
While OCS deploys sophisticated technology to block threats and protect its systems, Neil stresses that people remain the best line of defence.
“We can filter a lot. But we also want colleagues to feel empowered—to know they can come to us with questions, even about personal scams. Because when our people are cyber smart at home, they bring that resilience into the workplace too.”
Cyber resilience isn’t just a technical issue—it’s a people issue. And with every colleague who stops to think before they act, OCS strengthens the trust that holds our organisation together.
