CISA report touts cyber hygiene enrollment surge for critical infrastructure orgs

CISA reported a 201% increase in enrollment in its Cyber Hygiene vulnerability scanning service from Aug 1, 2022 to Aug 31, 2024, led by large gains in communications (300%), emergency services (268%), critical manufacturing (243%) and water/wastewater (242%). The analysis shows improvements across six Cybersecurity Performance Goals — fewer exploitable services (down from ~12 to ~8 per enrollee), reductions in critical/high Known Exploited Vulnerabilities, faster SSL remediation (from ~200 days to under 50), and sector OT exposure metrics (notably 63% in government services). Overall, CISA concludes its programs are driving moderate CPG adoption across critical infrastructure sectors.