As artificial intelligence makes business operations more efficient, it is also creating new challenges for organizations trying to protect their people, systems, and information. Phishing messages, deepfake impersonation, and AI-generated fraud are making it increasingly difficult to distinguish legitimate communications from malicious attempts.
Addressing these risks requires more than stronger IT infrastructure. Employees, executives, and public officials also need to understand how cyber threats work and how to respond.
This was the focus of PLDT Enterprise's cybersecurity awareness initiatives throughout October 2026, bringing digital and cyber resilience discussions to corporate employees, military institutions, government agencies, and an international academic community.
Through engagements with Coca-Cola Europacific Aboitiz Philippines (CCEAP), the Philippine Military Academy (PMA), the Institute of Data, and defense and law enforcement agencies, PLDT Enterprise is emphasizing the importance of making cybersecurity a shared organizational responsibility.
The initiatives were led by Alexis C. Bernardino, Principal CXO Advisor and Field CISO at PLDT Enterprise.
Why Cybersecurity Awareness Must Extend Beyond IT Teams
Cybersecurity has traditionally been associated with IT departments responsible for protecting company networks, devices, and information systems.
However, many attacks begin with ordinary workplace interactions. An employee may receive a seemingly legitimate email requesting sensitive information, a message impersonating a senior executive, or a voice or video communication designed to convince someone to authorize an unusual transaction.
Artificial intelligence adds another layer to these threats by making fraudulent communications more convincing through synthetic voices, manipulated videos, and generated messages.
For organizations, the consequences can extend beyond compromised accounts. Security incidents can disrupt business operations, expose confidential information, damage corporate reputation, and affect stakeholder trust.
During its October engagements, PLDT Enterprise highlighted the need to equip people across organizations with practical knowledge to recognize suspicious activity, verify unusual requests, protect sensitive credentials, and report potential incidents.
The underlying message is that cybersecurity should be part of everyday decision-making, not just a technical function handled by specialists.
Coca-Cola Europacific Aboitiz Philippines Focuses on Digital and Cyber Resilience
One of the October engagements took place on October 6, when PLDT Enterprise supported CCEAP's Cybersecurity Awareness Month initiative through a Digital and Cyber Resilience briefing at the company's office in Uptown Eastgate Tower 1.
Bernardino led the discussion, which covered emerging cyber threats, executive impersonation, AI-powered attacks, phishing, and the importance of organizational digital resilience.
The session examined how cybercriminals exploit human trust through fraudulent messages and increasingly sophisticated impersonation tactics.
Winnie T. Rebancos, Chief Information Officer of CCEAP, emphasized that cybersecurity is a shared responsibility that extends beyond the company's IT team.
She said equipping employees with the knowledge to recognize and respond to emerging threats helps protect business operations and maintain the trust placed in the organization.
The engagement reflects the growing importance of integrating cybersecurity awareness into workplace practices, particularly as companies become more dependent on connected systems and digital communications.
Philippine Military Academy Workshop Addresses Deepfakes and Social Engineering
PLDT Enterprise also brought its cybersecurity advocacy to the education and defense sectors through a Cyber Awareness Workshop at the Philippine Military Academy in Baguio City on October 21.
The session addressed risks relevant to military and academic environments, including:
- Social engineering and phishing attempts
- Deepfake impersonation
- Threats involving personal accounts and digital devices
- Suspicious communications designed to obtain sensitive information
Participants were encouraged to adopt practical safeguards, such as verifying unusual requests through trusted communication channels, protecting login credentials, identifying suspicious messages, and promptly reporting potential security incidents.
These practices are particularly relevant in environments where access to sensitive information and the credibility of official communications carry significant importance.
The workshop reinforced the idea that individual awareness contributes to an institution's broader cybersecurity preparedness.
PLDT Enterprise Extends Cybersecurity Knowledge Sharing to APAC Learners
The company's cybersecurity awareness efforts also reached an international academic audience.
In collaboration with the Institute of Data (IoD), PLDT Enterprise conducted an online Cybersecurity Industry Practitioner session for participants in a multinational cybersecurity cohort programme.
The learning community included participants from New Zealand, Australia, and Singapore, with connections to the University of Canterbury in New Zealand and the University of Technology Sydney in Australia.
The engagement provided an opportunity to share industry perspectives on emerging cyber risks and the importance of building stronger digital resilience.
It also highlighted the value of cross-border knowledge sharing as organizations across different markets face increasingly sophisticated cyber threats.
By extending its discussions beyond Philippine institutions, PLDT Enterprise brought its cybersecurity advocacy to a broader regional learning community.
Defense and Law Enforcement Agencies Join Digital Resilience Discussions
PLDT Enterprise further extended its October initiatives through Digital and Cyber Resilience Workshops for senior officials and leaders from the country's defense and law enforcement sectors.
The engagements reached the Department of National Defense (DND), the Philippine Army, and the Philippine National Police (PNP), as well as local government officials and public servants.
Led by Bernardino, the discussions focused on emerging threats that could affect government operations and public institutions, including deepfake impersonation, social engineering, phishing, and AI-powered fraud.
One concern raised during the sessions was how cybercriminals can exploit the authority associated with government officials and the public's trust in official institutions to make fraudulent communications appear legitimate.
The workshops highlighted the importance of verifying suspicious requests, protecting sensitive information, and reporting potential threats promptly.
For government organizations, these practices have implications beyond internal information security. They also contribute to protecting citizen data, maintaining operational continuity, and preserving public trust.
Building AI-Ready Organizations Requires People and Technology
Across its engagements, PLDT Enterprise emphasized that adopting new technologies is only one part of becoming an AI-ready organization.
Companies and institutions must also prepare their people to understand the risks associated with increasingly connected workplaces and AI-enabled tools.
This means moving beyond a reactive approach, where organizations respond only after a security incident, toward proactive and adaptive cybersecurity practices.
Some of the everyday measures highlighted during the sessions include:
- Verifying unexpected instructions, especially those involving money or confidential information.
- Confirming unusual requests through a separate, trusted communication channel.
- Avoiding the sharing of passwords, access credentials, and sensitive information.
- Being cautious of messages, calls, and videos that appear to come from familiar people or senior officials.
- Reporting suspicious activity promptly instead of assuming someone else will handle it.
These measures do not replace technical security controls, but they reinforce the human element of organizational cyber defense.
For businesses pursuing digital transformation, cybersecurity awareness must therefore be considered alongside technology adoption, operational planning, and risk management.
PLDT Enterprise's October initiatives reflect its continuing effort to share cybersecurity expertise across industries and institutions, with the broader goal of helping organizations become more prepared for an increasingly AI-driven digital environment.
As AI continues to change how people work and communicate, the ability to recognize threats and respond appropriately will remain an important part of building resilient organizations.