Basic security hygiene is more impactful than you may realize. While industry headlines are often dominated by emerging tech and the latest software or hardware solutions, base-level security hygiene still protects against 98% of attacks. This includes measures such as applying zero-trust principles or keeping systems up to date with the latest security patches.

However, despite the promise of these basic security hygiene measures, many organizations still fail to use them properly. If we consider zero trust, for example, the “Microsoft Digital Defense Report 2022” found that 93% of ransomware recovery engagements revealed insufficient privilege access and lateral movement controls — contradicting the zero-trust principle of least-privilege access.