Cybersecurity Bad Practices: Expanding on the CISA List

This article reviews CISA's published "bad practices" (unsupported software, default/known credentials, single-factor authentication), expands the list through an interview with ReliaQuest CTO Joe Partlow, explains root causes (legacy systems, vendor limitations, budget/execution constraints), outlines risks (downtime, data loss, critical service disruption), and recommends mitigations including MFA, advanced logging and monitoring, tested offsite backups, endpoint protection, network segmentation, and GreyMatter for detection and response.