October is European Cyber Security Month. A month in which we’re drawing extra attention to digital security. At Cube, we’re using this month to take a good, hard look at ourselves in the mirror. Or would you rather grab your phone’s camera? After all, you can see yourself just fine in that, too ;). But what about our digital security? How mindfully do we handle information, systems, and new technology? This month, we’re taking training courses to boost our security awareness and test our knowledge of AI. That way, we stay critical of our digital security and the technology we use every day.
It all starts in the workplace.
This year’s campaign theme is the workplace: employees and their skills. Because no matter how well your systems are secured, the strongest layer is human. This theme is right up our alley, as it’s something we’ve been emphasizing for years. The Eurobarometer survey on cybersecurity in the workplace, published by ENISA and the European Commission in late September, shows why.
74%
of European employees have received a suspicious email, text message, voice message, or link at least once.
45%
say their organization regularly shares updates on cybersecurity.
85%
want to improve their cybersecurity skills.
A certificate doesn’t protect anyone.
According to the ENISA Threat Landscape Report 2026, ransomware accounted for 40% of all financially motivated attacks analyzed in 2025. The threat is growing, but so is the willingness to learn. Organizations that systematically involve their people in this process make a difference. At Cube, we work daily with data from clients, including organizations in the healthcare sector and the public sector. That’s why we’re certified to ISO 27001 and NEN 7510. A certificate on the wall is nice to have, but it doesn’t protect anyone. What does protect us are the choices our colleagues make every day—and that’s what we continuously invest in.
The Cube Code training.
The Cube Code is our internal policy for quality, privacy, and security. Every colleague signs it upon joining the company. You know how it goes: a document like that quickly ends up in a folder, somewhere between the terms of employment and the parking rules. Not with us. We regularly test our colleagues’ knowledge of it and share updates with the entire company.
The first round covers the basics: what is an incident, where do you report it, and what do “privacy by design” and “privacy by default” mean? This month, we’re taking it a step further, focusing on real-world scenarios rather than definitions. Because knowing what a rule is isn’t the same as knowing what to do when it really matters. After submitting their answers, everyone sees for each question why a particular answer is correct, with a reference to the policy. This way, the training serves as both a test and a refresher. We then discuss the results openly, during a coffee break. That’s where the best conversations happen: “Why did you choose B?” Discussions like these ensure that the knowledge really sticks.
General insights about AI.
AI has become an indispensable part of Cube, in virtually every role. It makes us faster and sharper. But like any new colleague, AI has a few quirks you need to be aware of:
It tends to blab. Everything you type or upload into an AI tool ends up with the tool’s provider. So whatever you share leaves the building.
It can sometimes be tricked. Assistants that read emails or work in systems can be misled by hidden instructions in those emails or documents. This is called prompt injection.
It always sounds confident. Even when a number, source, or piece of code is incorrect. Verification remains a human task.
Our AI working conditions and security guidelines have been in place for some time. This month, we’re turning them into our own training program, deliberately written for everyone—not just developers. Meanwhile, we’re continuing to refine our AI policy together with the team, because the models are evolving faster than any policy document.
AI is a powerful colleague, and you remain responsible for what goes in and what comes out. Those who maintain that oversight get the best of both worlds.
Awareness isn’t just a checkmark on a list: it’s a habit.
One training session a year doesn’t make anyone safe. Awareness isn’t just a checkmark on a list—it’s a habit. That’s why we follow the same cycle that forms the basis of our ISO certification: plan, do, check, and improve. Each cycle goes one layer deeper, and each outcome shows where we can still grow as a team. We do this not only for ourselves; clients also entrust us with their data, systems, and end users. We earn that trust by taking information security and responsible AI use just as seriously as the quality of our code. The next step is already in the works. ISO 42001 is the international standard for the responsible management of AI within an organization. Next year, we’ll incorporate it into our audit planning, with certification as our goal. You can lock everything down. But the strongest layer of security remains the people who open the door. That’s why at Cube, we invest in knowledge, awareness, and safe behavior.
How secure is your digital environment?
Curious about how we incorporate security and privacy into the software we build? Feel free to contact us.
Worth reading next...
Where do you stand on AI? Discover our five phases.
AI-Assisted & Agentic SDLC: The Software Development Lifecycle in the AI Era.
