What is cyber hygiene and why is it critical for IWO?

• A. Regular audits and patching are unnecessary for robust security.
• B. Only encryption matters; other controls are optional.
• C. Patch management should be ignored to avoid downtime.
• D. Practices like patching, strong access control, encryption, and regular audits to reduce cyber risk and protect information environments.

Answer: (D)

Cyber hygiene is the ongoing set of practices that keep information systems secure and resilient. For an Information Warfare Officer, it’s essential because military information environments must stay reliable, confidential, and available even under pressure from adversaries. The most effective approach combines patch management to close known vulnerabilities, strong access controls to ensure only authorized users can reach critical systems, encryption to protect data at rest and in transit, and regular audits to verify that security controls are properly configured and functioning and to detect anomalies. Together, these practices reduce cyber risk and safeguard the information environments that support command, control, and decision-making in challenging operational settings. Statements that suggest skipping patches, treating encryption as sufficient on its own, or ignoring patching to avoid downtime miss the breadth of protection needed and would leave critical gaps that attackers could exploit.