Cyber Hygiene
What is Cyber Hygiene?
Routine practices and steps that users and organizations take to maintain system health and improve online security, similar to personal health hygiene.
Terms that appear alongside cyber hygiene
Each of these is named in at least one of the same controls as cyber hygiene. The number is how many controls name both.
- cybersecurity 9 shared controls
- phishing 5 shared controls
- vulnerability 4 shared controls
- baseline 4 shared controls
- business continuity 3 shared controls
- crisis management 3 shared controls
- access control 3 shared controls
- cybersecurity risk 3 shared controls
Frameworks that govern cyber hygiene
What the standards actually require on cyber hygiene
Requirements naming cyber hygiene across 6 standards, quoted from the control text.
Cyber hygiene is the common baseline the Directive expects everywhere: keeping software and hardware updated, managing configuration of devices, controlling and limiting administrator-level accounts, managing new installations, changing credentials, segmenting...
nis2-directive::Art.21.2.g · Basic cyber hygiene practices and cybersecurity training →UR E26 implementation requirements cover training + supplier management. Crew training: cyber awareness for all crew (phishing + social engineering + USB hygiene + password + reporting);
IACS-UR-E26-Implementation-Training-Supplier-OEM-OnboardTraining · IACS UR E26 Implementation - Training + Awareness + Supplier + OEM Management + Cyber Hygiene →NSS-17 + NSS-42-G require personnel security + trustworthiness verification + training + awareness aligned with CSL access. Personnel security: background check + criminal record + financial + employment history + reference check + national security clearance...
IAEA-NSS17-Personnel-Trustworthiness-Training-Awareness · IAEA NSS-17 - Personnel Security + Trustworthiness + Training + Awareness + Cyber Hygiene →Operate cyber hygiene + security awareness per OSFI B-13 Domain 5. Cyber hygiene must (a) maintain patch management with risk-based prioritisation + KEV-driven remediation + (b) configuration management with hardened baselines + drift detection + (c) vulnerabi...
OSFIB13-5 · Cyber Hygiene and Security Awareness →Audit + Drills + Training operationalise the Directions through ongoing assurance + cyber preparedness. (1) CERT-In Cyber Security Audit: organisations should undergo periodic cyber security audit by CERT-In Empanelled Information Security Auditing Organisatio...
CERTIN-Audit-Drills-Training-AwarenessProgram-CERTInExercises-CISO · CERT-In Audit + Cyber Security Drills + Training + Awareness + CERT-In Cyber Exercises + CISO + Information Security Auditor Empanelment →Lloyds Cyber Insurance Requirements - Risk Selection and Cyber Hygiene Underwriting Criteria. Underwriters must conduct rigorous risk selection + due diligence assessing insured-cyber hygiene including: (a) Mandatory cyber hygiene requirements (insurance-grade...
LLOYDS-CI-Risk-Selection-Cyber-Hygiene-Underwriting-Criteria-Pre-Bind-Risk-Engineering-MFA-Backup-EDR · Lloyds Cyber Insurance Risk Selection + Hygiene + Pre-Bind Engineering →Questions people ask about cyber hygiene
What is Cyber Hygiene?
Why is Cyber Hygiene important for compliance?
Which compliance frameworks address Cyber Hygiene?
Where can I learn more about Cyber Hygiene?
See how Cyber Hygiene applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.