Cyber Hygiene
What is Cyber Hygiene?
Routine practices and steps that users and organizations take to maintain system health and improve online security, similar to personal health hygiene.
Terms that appear alongside cyber hygiene
Each of these is named in at least one of the same controls as cyber hygiene. The number is how many controls name both.
- cybersecurity 9 shared controls
- phishing 5 shared controls
- vulnerability 4 shared controls
- baseline 4 shared controls
- business continuity 3 shared controls
- crisis management 3 shared controls
- access control 3 shared controls
- cybersecurity risk 3 shared controls
Frameworks that govern cyber hygiene
What the standards actually require on cyber hygiene
Requirements naming cyber hygiene across 6 standards, quoted from the control text.
The FI must implement controls at its network perimeter to restrict all unauthorised network traffic; MAS does not prescribe device types, which depend on the systems, environment and risks (FAQ).
monetary-authority-of-singapore-technology-risk-management-guidelines::CHN.4.4 · Notice on Cyber Hygiene 4.4: network perimeter controls →NSS-17 + NSS-42-G require personnel security + trustworthiness verification + training + awareness aligned with CSL access. Personnel security: background check + criminal record + financial + employment history + reference check + national security clearance...
IAEA-NSS17-Personnel-Trustworthiness-Training-Awareness · IAEA NSS-17 - Personnel Security + Trustworthiness + Training + Awareness + Cyber Hygiene →Cyber hygiene is the common baseline the Directive expects everywhere: keeping software and hardware updated, managing configuration of devices, controlling and limiting administrator-level accounts, managing new installations, changing credentials, segmenting...
nis2-directive::Art.21.2.g · Basic cyber hygiene practices and cybersecurity training →Operate cyber hygiene + security awareness per OSFI B-13 Domain 5. Cyber hygiene must (a) maintain patch management with risk-based prioritisation + KEV-driven remediation + (b) configuration management with hardened baselines + drift detection + (c) vulnerabi...
OSFIB13-5 · Cyber Hygiene and Security Awareness →Every licensee must comply with the Notice on Cyber Hygiene (FSM-N14) and protect customer information; licensees providing DPT services must also comply with the Notice on Technology Risk Management (FSM-N13) from 6 November 2024, and others should follow the...
singapore-payment-services-act-2019::N-TRM · Meet the cyber hygiene notice and, for DPT providers, the technology risk management notice →Train staff to recognise a possible incident and to report it. Implementation Groups: IG1, IG2 and IG3 (part of the IG1 essential cyber hygiene baseline, so every enterprise applies it). Asset type: Users. Security function: Protect.
cis-controls-v8-1::14.6 · Train Workforce Members on Recognizing and Reporting Security Incidents →Questions people ask about cyber hygiene
What is Cyber Hygiene?
Why is Cyber Hygiene important for compliance?
Which compliance frameworks address Cyber Hygiene?
Where can I learn more about Cyber Hygiene?
See how Cyber Hygiene applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.