Tripwire examined how organizations are implementing security controls that the Center for Internet Security (CIS) refers to as "Cyber Hygiene." The survey, conducted in July in partnership with Dimensional Research, included responses from 306 IT security professionals. Read the full report here: https://www.tripwire.com/misc/state-of-cyber-hygiene-report-register/?referredby=socialmedia/

1. STATE OF
HYGIENE
CYBER
2018
STATE OF
CYBER
HYGIENE
2018T R I P W I R E S U R V E Y K E Y F I N D I N G S

2. S O U R C E : T R I P W I R E S T A T E O F C Y B E R H Y G I E N E R E P O R T 2 0 1 8
ORGANIZATIONS DO NOT USE
HARDENING BENCHMARKS,
LIKE CIS OR DISA GUIDELINES,
TO ESTABLISH A SECURE
BASELINE
2 IN 32 IN 3

3. 57%57%57%OF ORGANIZATIONS SAID IT TAKES
HOURS, WEEKS, MONTHS OR LONGER
TO DETECT NEW DEVICES CONNECTING
TO THEIR NETWORK
S O U R C E : T R I P W I R E S T A T E O F C Y B E R H Y G I E N E R E P O R T 2 0 1 8

4. OF ORGANIZATIONS ARE NOT
SCANNING FOR VULNERABILITIES
WEEKLY OR ON A MORE
FREQUENT BASIS
40%40%
S O U R C E : T R I P W I R E S T A T E O F C Y B E R H Y G I E N E R E P O R T 2 0 1 8

5. ORGANIZATIONS TAKE
ABOUT A MONTH OR
LONGER TO DEPLOY A
SECURITY PATCH
1 IN 41 IN 4
S O U R C E : T R I P W I R E S T A T E O F C Y B E R H Y G I E N E R E P O R T 2 0 1 8

6. OF ORGANIZATIONS ARE NOT
COLLECTING LOGS FROM ALL
CRITICAL SYSTEMS AND STORING
THEM IN A CENTRAL LOCATION
54%54%
S O U R C E : T R I P W I R E S T A T E O F C Y B E R H Y G I E N E R E P O R T 2 0 1 8

7. OF ORGANIZATIONS
BELIEVE THEY NEED TO
GET MORE EFFICIENT AT
CHECKING LOGS
97%
S O U R C E : T R I P W I R E S T A T E O F C Y B E R H Y G I E N E R E P O R T 2 0 1 8
97%

8. 1 IN 3
S O U R C E : T R I P W I R E S T A T E O F C Y B E R H Y G I E N E R E P O R T 2 0 1 8
1 IN 3
ORGANIZATIONS DO NOT
REQUIRE DEFAULT
PASSWORDS TO BE CHANGED

9. 41%
S O U R C E : T R I P W I R E S T A T E O F C Y B E R H Y G I E N E R E P O R T 2 0 1 8
OF ORGANIZATIONS DO NOT
USE MULTI-FACTOR
AUTHENTICATION FOR
ACCESSING ADMINISTRATIVE
ACCOUNTS
41%

10. FOR THE LATEST SECURITY NEWS,
TRENDS & INSIGHTS, VISIT:
FOR THE LATEST SECURITY NEWS,
TRENDS & INSIGHTS, VISIT:
TRIPWIRE.COM/BLOG
@TRIPWIREINC
TRIPWIRE.COM/BLOG
@TRIPWIREINC