---
title: Education, Education, Education
description: When it comes to cybersecurity, things can get significantly better with a relatively small investment in education.
image: https://blog.grantmcgregor.co.uk/hubfs/education.png
---
[](https://www.grantmcgregor.co.uk/)
- [Home](https://grantmcgregor.co.uk/)
- About Us
- [Our Story](https://grantmcgregor.co.uk/about-us/our-story)
- [Meet the Team](https://grantmcgregor.co.uk/about-us/meet-the-team)
- [Certifications](https://grantmcgregor.co.uk/about-us/certifications)
- [Careers](https://grantmcgregor.co.uk/about-us/careers)
- IT Support Services
- [IT Support Services](https://grantmcgregor.co.uk/it-support-services)
- [People Centric Support](https://grantmcgregor.co.uk/it-support-services/people-centric-support)
- [Enhanced Security Service](https://grantmcgregor.co.uk/it-support-services/enhanced-security-service)
- Professional IT Services
- [Professional IT Services](https://grantmcgregor.co.uk/professional-it-services)
- [Microsoft 365](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-business-premium)
- [Microsoft Copilot](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-copilot)
- [AI Adoption Services](https://grantmcgregor.co.uk/ai-adoption-services)
- [Microsoft Azure](https://grantmcgregor.co.uk/professional-it-services/microsoft-azure)
- [MDR](https://blog.grantmcgregor.co.uk/mdr-vs-soc-cyber-security-defence)
- [Microsoft Teams Phone](https://grantmcgregor.co.uk/professional-it-services/microsoft-teams-phone)
- [KnowBe4](https://grantmcgregor.co.uk/professional-it-services/knowbe4)
- [DMARC](https://grantmcgregor.co.uk/professional-it-services/dmarc)
- [Enclave Networks](https://grantmcgregor.co.uk/professional-it-services/enclave-networks)
- [Cyber Security](https://grantmcgregor.co.uk/cyber-security)
- Knowledge Hub
- [Case Studies](https://grantmcgregor.co.uk/knowledge-hub/case-studies)
- [Testimonials](https://grantmcgregor.co.uk/knowledge-hub/success-stories)
- [Blog](https://grantmcgregor.co.uk/knowledge-hub/blog)
- [Podcast](https://grantmcgregor.co.uk/knowledge-hub/podcast)
- [Client Area](https://grantmcgregor.co.uk/client-area)
- [Contact us](https://grantmcgregor.co.uk/contact-us)
- [Home](https://grantmcgregor.co.uk/)
- About Us
- [Our Story](https://grantmcgregor.co.uk/about-us/our-story)
- [Meet the Team](https://grantmcgregor.co.uk/about-us/meet-the-team)
- [Certifications](https://grantmcgregor.co.uk/about-us/certifications)
- [Careers](https://grantmcgregor.co.uk/about-us/careers)
- IT Support Services
- [IT Support Services](https://grantmcgregor.co.uk/it-support-services)
- [People Centric Support](https://grantmcgregor.co.uk/it-support-services/people-centric-support)
- [Enhanced Security Service](https://grantmcgregor.co.uk/it-support-services/enhanced-security-service)
- Professional IT Services
- [Professional IT Services](https://grantmcgregor.co.uk/professional-it-services)
- [Microsoft 365](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-business-premium)
- [Microsoft Copilot](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-copilot)
- [AI Adoption Services](https://grantmcgregor.co.uk/ai-adoption-services)
- [Microsoft Azure](https://grantmcgregor.co.uk/professional-it-services/microsoft-azure)
- [MDR](https://blog.grantmcgregor.co.uk/mdr-vs-soc-cyber-security-defence)
- [Microsoft Teams Phone](https://grantmcgregor.co.uk/professional-it-services/microsoft-teams-phone)
- [KnowBe4](https://grantmcgregor.co.uk/professional-it-services/knowbe4)
- [DMARC](https://grantmcgregor.co.uk/professional-it-services/dmarc)
- [Enclave Networks](https://grantmcgregor.co.uk/professional-it-services/enclave-networks)
- [Cyber Security](https://grantmcgregor.co.uk/cyber-security)
- Knowledge Hub
- [Case Studies](https://grantmcgregor.co.uk/knowledge-hub/case-studies)
- [Testimonials](https://grantmcgregor.co.uk/knowledge-hub/success-stories)
- [Blog](https://grantmcgregor.co.uk/knowledge-hub/blog)
- [Podcast](https://grantmcgregor.co.uk/knowledge-hub/podcast)
- [Client Area](https://grantmcgregor.co.uk/client-area)
- [Contact us](https://grantmcgregor.co.uk/contact-us)
[Contact Us](https://grantmcgregor.co.uk/contact-us)
[Back to main](https://grantmcgregor.co.uk/knowledge-hub/blog)
Business News, Digital Transformation, Cyber Security, IT Strategy
# Education, Education, Education
Grant McGregor Team
30 April 2019 • 4 min read
# Those of us of a certain age will remember the promise that things can only get better… and the mantra of “education, education, education”. It all seems a long way away today. The good news? When it comes to cybersecurity, things can get significantly better with a relatively small investment in education.
Training budgets are often one of the first things to be cut when businesses need to tighten their belts, but this shouldn’t extend to cybersecurity training.
Cybersecurity training has serious return on investment potential.
Just think about the fines associated with a data breach these days: some 4 percent of your organisation’s annual turnover. To say nothing of the reputational damage, lost business and customer reparations.
### A small investment now
So where should small businesses and organisations focus their cyber security training budget? The Grant McGregor team recommends three key elements that you should address immediately if you haven’t done so already:
• General security awareness training
• Closing vulnerabilities around Office 365
• Ensuring staff know how to spot a phishing attack
These three topics represent some of the most common attack vectors facing small and mid-size organisations today. And, what’s more, they’re easy to address. You don’t have to be the fastest antelope on the security savannah; you just have run fast enough to make sure you’re not the most obvious target for the cyber attackers (look out for a future blog post on this subject too!).
This is why we recommend these three areas should be your starting point when it comes to cyber security awareness.
### General security awareness
We’ve spoken about the Government’s Cyber Essentials security standard many times on this blog because it is such a great, practical introduction to the topic of cyber security. What’s more, Scottish based businesses can [apply for grant funding](https://www.grantmcgregor.co.uk/cyber-essentials-voucher-scheme-for-scotland-act-now-apply-for-your-1000-voucher-today/) to help them achieve the certification.
To find out more, [read our blog](https://www.grantmcgregor.co.uk/2018/why-shrewd-companies-are-getting-tested-and-certified-for-cyber-essentials/) on the subject or contact our team directly today [here.](https://www.grantmcgregor.co.uk/how-to-protect-your-business-your-customers-and-your-supply-chain-through-cyber-essentials/)
### Office 365
Research has shown that as Office 365 has grown in popularity and uptake, so has its potential for being compromised. As we detailed in [an earlier blog](https://www.grantmcgregor.co.uk/2019/office-365-popularity-growsas-does-its-vulnerability/), one of the most common routes for compromised accounts is fraudulent emails directing users to a fake Office 365 portal where recipients are prompted to enter their passwords.
Once the attackers have passwords into a user’s Office 365 account, they can use this information to steal or sell commercial information, access other systems or social media accounts, engage in spying or impersonation activities, including to launch spear phishing attacks from the compromised account.
The best way to deal with this threat is, first, to ensure staff are fully aware of how to spot a fraudulent email. Second, we recommend strengthening security by adding two-factor authentication or multi-factorial authentication to your organisation’s Office 365 accounts. This can be achieved quite simply and cheaply – if you’d like to know more about how, please contact our team on 0808 164 4142.
### Stop the phishing!
When you know what to look for, it is easy to spot a phishing attack. By training your staff in how to detect a threat you can transform your biggest security vulnerability to the biggest security asset in your organisation.
It’s what security expert Kevin Mitnick calls [creating a “human firewall”.](https://www.grantmcgregor.co.uk/it-software-and-solutions/gm-cyber-aware/) He’s designed a cloud-based training programme that can be delivered to all staff within your organisation simply and effectively, to help them spot phishing and spear phishing attacks.
You can access this programme through Grant McGregor, either as a standalone solution or as part of a bigger security programme. [Contact our team](https://www.grantmcgregor.co.uk/your-current-security-layers-still-dont-sufficiently-address-your-weakest-link-employees/) to find out more.
### Education, education, education
While security might seem like a complex topic, it needn’t be – help is at hand.
For more information about any of the cyber security initiatives, training or programmes featured in this blog, please[get in touch](https://www.grantmcgregor.co.uk/contact-us/) with our friendly team today.
Photo by [Mikael Kristenson](https://unsplash.com/photos/3aVlWP-7bg8?utm_source=unsplash&utm_medium=referral&utm_content=creditCopyText) on [Unsplash](https://unsplash.com/search/photos/classroom?utm_source=unsplash&utm_medium=referral&utm_content=creditCopyText)
Grant McGregor Team
30 April 2019 • 4 min read
## Recent Posts
### Shadow AI: Is Your Business Ready for AI Adoption?
Understand shadow AI's impact on your business. Discover how to assess risks, improve processes, and adopt AI securely w...
[Read More](https://blog.grantmcgregor.co.uk/shadow-ai-is-your-business-ready-for-ai-adoption)
### Our Net Zero Target for 2040: What Can We Change?
From company vehicles and travel to suppliers and technology, see how Grant McGregor is working towards its net zero tar...
[Read More](https://blog.grantmcgregor.co.uk/our-net-zero-target-for-2040-what-can-we-change)
### What Is Penetration Testing? A Guide for Businesses
Learn what penetration testing is, how it works, what the report should include and when your business should consider a...
[Read More](https://blog.grantmcgregor.co.uk/what-is-penetration-testing-a-guide-for-businesses)
### Grant McGregor Recognised as a Leading Global MSP in the 2026 MSP 501
Grant McGregor has been named a Top Global Managed Service Provider in the 2026 MSP 501, ranking #1 Scotland-based MSP a...
[Read More](https://blog.grantmcgregor.co.uk/grant-mcgregor-recognised-as-a-leading-global-msp-in-the-2026-msp-501)
Union
## Empower your business with secure, expert-led solutions.
Talk to us about people-focused technology that drives results.
[Start a conversation](https://grantmcgregor.co.uk/contact-us)
Premium IT Services Tailored for Leading Brands
[Follow us on LinkedIn](https://www.linkedin.com/company/grant-mcgregor-ltd/) [Follow us on Facebook](https://www.youtube.com/itgrantmcgregor) [Follow us on Facebook](https://www.facebook.com/grantmcgregorltd/) [Follow us on Twitter](https://x.com/GrantMcGregorIT)
Quick Links
- [Home](https://grantmcgregor.co.uk)
- [About us](https://grantmcgregor.co.uk/about-us/our-story)
- [Knowledge Hub](https://grantmcgregor.co.uk/knowledge-hub/blog)
- [Contact us](https://grantmcgregor.co.uk/contact-us)
Services
- [People Centric Support](https://grantmcgregor.co.uk/it-support-services/people-centric-support)
- [Enhanced Security Service](https://grantmcgregor.co.uk/it-support-services/enhanced-security-service)
- [Professional IT Services](https://grantmcgregor.co.uk/professional-it-services)
- [Cyber Security](https://grantmcgregor.co.uk/cyber-security)
Edinburgh – Chesterfield
[0131 603 7910](tel:+441316037910)
[info@grantmcgregor.co.uk](mailto:info@grantmcgregor.co.uk)
**Main Office:**
The Merchants' Hall,
22 Hanover St,
Edinburgh EH2 2EP
© 2026
Grant McGregor. All rights reserved.
[Privacy and Cookie Policy](https://blog.grantmcgregor.co.uk/hubfs/UsefulDownloads/Policies/GRMC-SEC-Privacy-and-Cookie-Policy.pdf)
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Grant McGregor Team",
"url" : "https://blog.grantmcgregor.co.uk/author/grmc-team"
},
"dateModified" : "2020-10-22T16:00:48.422Z",
"datePublished" : "2019-04-30T08:23:21.000Z",
"headline" : "Education, Education, Education",
"image" : [ "https://blog.grantmcgregor.co.uk/hubfs/education.png" ],
"mainEntityOfPage" : {
"@id" : "https://blog.grantmcgregor.co.uk/2019/education-education-education",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.grantmcgregor.co.uk/hubfs/GRMC_blue_logo.svg"
},
"name" : "Grant McGregor"
}
}
```
```json
{
"@context" : "https://schema.org",
"@id" : "https://grantmcgregor.co.uk/",
"@type" : "LocalBusiness",
"address" : {
"@type" : "PostalAddress",
"addressCountry" : "GB",
"addressLocality" : "Edinburgh",
"postalCode" : "EH2 2EP",
"streetAddress" : "22 Hanover Street"
},
"geo" : {
"@type" : "GeoCoordinates",
"latitude" : 55.9526313,
"longitude" : -3.1970679
},
"image" : "https://grantmcgregor.co.uk/hubfs/GRMC_blue_logo.svg",
"name" : "Grant McGregor",
"openingHoursSpecification" : {
"@type" : "OpeningHoursSpecification",
"closes" : "18:00",
"dayOfWeek" : [ "Monday", "Tuesday", "Wednesday", "Thursday", "Friday" ],
"opens" : "08:00"
},
"sameAs" : [ "https://www.facebook.com/grantmcgregorltd/", "https://x.com/GrantMcGregorIT", "https://www.youtube.com/itgrantmcgregor", "https://www.linkedin.com/company/grant-mcgregor-ltd/" ],
"telephone" : "+441316037910",
"url" : "https://grantmcgregor.co.uk/"
}
```