TL;DR: During Cybersecurity Awareness Month, $100,000 was donated to six organisations supporting youth digital literacy, online safety, and STEM education, according to 1Password. The signal for identity teams is that secure behaviour starts earlier than policy enforcement, and security culture has to extend beyond the enterprise.
Editorial analysis by NHI Mgmt Group, based on content published by 1Password: “1Password for Good: Giving back during cybersecurity awareness month”.
Key questions
Q: How should organisations improve digital literacy to reduce identity risk later?
A: Focus on the habits that make identity controls effective: safe password handling, phishing resistance, device hygiene, and understanding how trust works online.
Q: Why should IAM teams care about online safety education?
A: IAM controls assume people can make safe choices when they are asked to reset credentials, approve access, or follow login prompts.
Q: What should security teams do with community digital safety initiatives?
A: Treat them as part of the broader resilience environment, not as a separate philanthropy topic.
Practitioner guidance
- Strengthen security awareness beyond the enterprise Build awareness content that assumes users arrive with uneven digital literacy and varying exposure to online safety concepts.
- Include upstream user education in risk thinking Treat schools, youth programmes, and community partners as part of the broader ecosystem that shapes future identity risk.
- Review security support for mission-driven partners Offer lightweight guidance to non-profits and community organisations that manage sensitive data but lack mature internal security processes.
Bottom line: Digital literacy and online safety education shape the quality of future identity behaviour, which makes them relevant to long-term IAM resilience.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
Digital safety is upstream of identity governance. Security programmes usually start at onboarding, authentication, and access policy, but the habits that determine whether those controls work are formed much earlier. The article shows that online safety education is part of the resilience chain, because people who learn digital caution before entering the workforce are easier to govern and less likely to create avoidable identity risk. The practitioner takeaway is that IAM maturity depends in part on the digital literacy environment around it.
A question worth separating out:
Q: How can organisations support non-profits that lack strong cybersecurity processes?
A: Provide practical guidance that improves basic access discipline, account protection, and safe collaboration without requiring a large security team. Smaller organisations often need help with simple controls and user behaviour, because those are the areas where limited capacity creates the most exposure.
👉 Read our full editorial: 1Password’s community donations highlight digital safety skills