I don’t think most business owners ignore cyber security because they’re not interested. From what I see day to day, it’s usually the opposite.
They ignore it because it gets in the way.
Not in a big, dramatic sense. It’s the smaller moments that add up. Logging in again when you’re already in a rush. Approving something that doesn’t feel necessary. Being asked to do something “securely” that takes longer than it should.
Over time, people find ways around it. Nothing reckless. Just practical decisions to keep things moving.
That’s where the real story sits and it’s not unusual. In fact, it’s probably more common than people think.
I was speaking to a small business over in Clay Cross not long ago and this came up without them even realising it was a security conversation.
We weren’t talking about threats or breaches. It started with something simple. They’d shared a login between a couple of people because it was easier than setting everyone up individually. One of the team mentioned they kept getting prompted for MFA and just approved it quickly so they could carry on. Another had reused a password because it was the only way to keep track of everything.
Nothing unusual. No red flags. Just normal day-to-day work.
But when you step back and look at it, that’s exactly where the gaps start to form. Not through big mistakes, just small decisions that make things easier in the moment.
That’s usually when the conversation shifts.
Across businesses I work with around Chesterfield and Sheffield, the pattern is pretty consistent. Security is technically in place, but day to day it doesn’t quite work the way it was intended.
People share logins because it’s quicker. Passwords get reused because it’s easier to remember one than ten. Approval prompts get clicked through without much thought because there’s something else waiting. Shortcuts creep in, not because anyone is trying to take risks, but because they’re trying to get their work done.
What we often see
- ✓ Shared logins being used because it’s quicker than managing individual access
- ✓ Passwords reused across systems to avoid slowing people down
- ✓ MFA prompts approved without much thought, just to get back to work
- ✓ Security steps quietly bypassed because they interrupt day-to-day tasks
- ✓ Tools in place, but people relying on workarounds to keep things moving
When security feels like friction, it loses.
If something slows people down, it gets bypassed. If it feels unclear, it gets ignored. If it adds extra steps without an obvious benefit, it fades into the background.
That’s not a people problem. It’s a design problem.
Most of the situations I end up helping with don’t start with someone doing something obviously wrong. They start with something completely understandable. A quick decision, a small shortcut, a moment of pressure during a busy day. That’s all it takes.
When things are set up properly, security doesn’t feel like a constant interruption. It sits quietly in the background and does its job. People aren’t thinking about it every few minutes, and they’re not having to work around it just to get through the day.
That’s usually the difference businesses notice. Not more tools, not more alerts, just less friction.
This is where the approach behind platforms like Huntress starts to make sense, even if you don’t think of it in those terms at first. It’s not about adding more layers for people to deal with. It’s about taking some of that responsibility away from them.
Things are being monitored. Things are being checked. Things are being acted on. All without someone in the business having to stop what they’re doing and figure it out.
A more useful question than “are we secure?” is whether your current setup is helping people get on with their work or quietly getting in the way.
Because if it’s the latter, people will find a way around it. They always do.
If your setup feels like something people tolerate rather than trust, it’s probably worth a closer look.
Book a quick security check:
https://blackswancyber.co.uk/contact-us/
This is for you if
- ✓ Your team is busy and needs security to work in the background, not slow them down
- ✓ You suspect people are working around security just to get things done
- ✓ You want protection that doesn’t rely on everyone getting it right every time
- ✓ You’d rather reduce friction than keep adding more rules and steps
This might not be for you if
- ✕ You prefer a fully locked-down environment, even if it slows people down
- ✕ You’re happy relying on people to follow security steps perfectly every time
- ✕ You see cyber security as a one-off setup rather than something ongoing
- ✕ You’re only looking for the cheapest, quickest fix
