Cyber Hygiene Baseline

Cyber hygiene baseline is the minimum set of security practices needed before more advanced cyber policy, AI defense, or offensive capability can be useful. Cyberattacks on U.S. water systems raise concerns about security adds the concept through Nikita Shah’s warning that water-system attackers can exploit default passwords, missing multi-factor authentication, and internet-connected operational technology.

The concept is deliberately basic. It links Water System Cyber Resilience to Default Deny Security and Zero Trust Security by showing that critical infrastructure can remain exposed when mundane controls are not implemented consistently.

Key Claims

• Default passwords are a critical-infrastructure risk when operators leave vendor or device defaults in place.
• Missing multi-factor authentication keeps remote access and administrative accounts easier to compromise.
• Internet exposure matters when operational technology was not designed to be reachable by ordinary network attackers.
• Funding only helps when it produces executed controls, monitoring, technical staffing, and recovery capability.
• Advanced AI cyber-defense tools cannot compensate for neglected baseline practices.

Connections

• Nikita Shah - analyst grounding the concept in the water-system episode.
• Water System Cyber Resilience and Industrial Control System Cyber Risk - affected infrastructure context.
• Default Deny Security and Zero Trust Security - adjacent baseline-security concepts.
• AI Cyber-Defense Utility - advanced defensive layer that still depends on baseline controls.