--- title: Mo Money, Mo [cyber] Problems - Merlin description: Gartner reports that average annual cybersecurity spend per employee has doubled image: https://www.merlincyber.com/hubfs/New%20Merlin%20-%202021/Images/Hero-FINANCIAL-AdobeStock_354007466-BlueG-copy.png --- [![Merlin-Cyber-White-Odot_1@4x-1](https://www.merlincyber.com/hubfs/Merline%20Cyber/Images/Merlin-Cyber-White-Odot_1@4x-1.png) ](https://www-merlincyber-com.sandbox.hs-sites.com/home) [![Contact](https://no-cache.hubspot.com/cta/default/5464151/26d9375d-7d9d-4ed0-86d2-5110f37ecdce.png)](https://cta-redirect.hubspot.com/cta/redirect/5464151/26d9375d-7d9d-4ed0-86d2-5110f37ecdce) ** # Mo Money, Mo [cyber] Problems by [Merlin Cyber](https://www.merlincyber.com/resource-blog/author/merlin-cyber) | May 6, 2022 Related Topics: [ Solution Briefs](https://www.merlincyber.com/resource-blog/tag/solution-briefs), [ White Papers](https://www.merlincyber.com/resource-blog/tag/white-papers), [ Infographics](https://www.merlincyber.com/resource-blog/tag/infographics) Gartner reports that average annual cybersecurity spend per employee has doubled, from $584 in 2012 to $1,178 in 2018. With increased spend you might infer that companies have newer more effective cybersecurity tools and are therefore safer, but we aren’t seeing that increased spend necessarily equals increased safety. Large scale data beaches are still happening, and the stakes are high with fines for these breaches [costing some over half a billion](https://www.nytimes.com/2019/07/22/business/equifax-settlement.html). Simply throwing money (i.e. more cyber security tools) at the problem won’t solve it. Companies have created a fog of too many tools and a challenge of how they manage those tools to ensure they are configured and running properly. That’s where Cyber Hygiene can help. The term Cyber Hygiene was first used by [Vint Cerf in 2000](https://www.jec.senate.gov/archive/Documents/Hearings/cerf22300.htm), he referenced it as the “steps we know can be taken to improve security and resilience.” More recently the Center for Internet Security (CIS) and Council on CyberSecurity (CCS) launched a [Cyber Hygiene Campaign](https://www.prweb.com/releases/2014/04/prweb11732752.htm)and broke down those steps into the “5 top priorities.” 1. Count: Know what’s on your systems and what you need to protect 2. Configure: Continuously manage systems using “known good” configurations 3. Control: Know and limit who has administrative privileges of security settings 4. Patch: Keep software and hardware up-to-date to protect against known vulnerabilities 5. Repeat: Cybersecurity is an iterative process with no finality A great place to get started is prioritizing what you are trying to protect and deciding how you will measure your success. Aligning to an industry recognized framework (such as [NIST](https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.04162018.pdf)or [CIS Critical Security Controls](https://www.cisecurity.org/controls/)) will help guide you during both implementation and assessment. Once critical security controls have been implemented, which is no small task, adherence to your chosen framework(s) through Cyber Hygiene will ensure the health and effectiveness of your cybersecurity ecosystem. If you’re looking for ways to measure your success doing an audit assessment or penetration test will be helpful in showing the state of your environment at that given time. If you’re interested in continuous metrics and measuring, implementing a Cyber Hygiene monitoring tool, like [Cyber Observer](https://www.merlincyber.com/partners/cyber-observer/), will enable you to track your improvement and score cybersecurity in near real time. [![Eliminate the Strain](https://www.merlincyber.com/hubfs/Merlin%20Ventures/Merlin%20Ventures%20-%20Images/EP-Visibility-AdobeStock_310976948-1030x618.jpeg) ](https://www.merlincyber.com/resource-blog/eliminate-the-strain-0) [Case Studies](https://www.merlincyber.com/resource-blog/tag/case-studies), [eBooks](https://www.merlincyber.com/resource-blog/tag/ebooks), [Videos](https://www.merlincyber.com/resource-blog/tag/videos) ### [ Eliminate the Strain ](https://www.merlincyber.com/resource-blog/eliminate-the-strain-0) [![More Power to You: Accelerating Energy Modernization](https://www.merlincyber.com/hubfs/Blog%20banner-Wordpress%20847x321.75-02.jpg) ](https://www.merlincyber.com/resource-blog/more-power-to-you-0) [Case Studies](https://www.merlincyber.com/resource-blog/tag/case-studies), [White Papers](https://www.merlincyber.com/resource-blog/tag/white-papers), [Videos](https://www.merlincyber.com/resource-blog/tag/videos) ### [ More Power to You: Accelerating Energy Modernization ](https://www.merlincyber.com/resource-blog/more-power-to-you-0) [![Choosing the Right Endpoint Security Solution](https://www.merlincyber.com/hubfs/Merline%20Cyber/Images/IIM-Solution-img1.png) ](https://www.merlincyber.com/resource-blog/choosing-the-right-endpoint-security-solution-0) [Case Studies](https://www.merlincyber.com/resource-blog/tag/case-studies), [eBooks](https://www.merlincyber.com/resource-blog/tag/ebooks), [Solution Briefs](https://www.merlincyber.com/resource-blog/tag/solution-briefs) ### [ Choosing the Right Endpoint Security Solution ](https://www.merlincyber.com/resource-blog/choosing-the-right-endpoint-security-solution-0) [![Risky Business: How Enterprise Mobility is Transforming the Government – and Introducing New Cyber Threats](https://www.merlincyber.com/hubfs/Imported_Blog_Media/SOCA-AdobeStock_192261203-1030x841.jpg) ](https://www.merlincyber.com/resource-blog/risky-business-how-enterprise-mobility-is-transforming-the-government-and-introducing-new-cyber-threats-0) [Solution Briefs](https://www.merlincyber.com/resource-blog/tag/solution-briefs), [White Papers](https://www.merlincyber.com/resource-blog/tag/white-papers), [Data Sheets](https://www.merlincyber.com/resource-blog/tag/data-sheets) ### [ Risky Business: How Enterprise Mobility is Transforming the Government – and Introducing New Cyber Threats ](https://www.merlincyber.com/resource-blog/risky-business-how-enterprise-mobility-is-transforming-the-government-and-introducing-new-cyber-threats-0) [![IGA Tools Ensure that Healthcare Employees Get the Job Done While “Staying in Their Lane”](https://www.merlincyber.com/hubfs/Merlin%20Ventures/Merlin%20Ventures%20-%20Images/GettyImages-736491071-1-17.jpg) ](https://merlincyber.com/) [Case Studies](https://www.merlincyber.com/resource-blog/tag/case-studies), [Solution Briefs](https://www.merlincyber.com/resource-blog/tag/solution-briefs), [Videos](https://www.merlincyber.com/resource-blog/tag/videos) ### [ IGA Tools Ensure that Healthcare Employees Get the Job Done While “Staying in Their Lane” ](https://merlincyber.com/) [![The Critical Role of a People-Centric Approach for Reducing Insider Threats](https://www.merlincyber.com/hubfs/Blog%20banner-Wordpress%20847x321.75-01.jpg) ](https://www.merlincyber.com/resource-blog/critical-role-people-centric-approach-reducing-insider-threats-0) [eBooks](https://www.merlincyber.com/resource-blog/tag/ebooks), [Data Sheets](https://www.merlincyber.com/resource-blog/tag/data-sheets), [Infographics](https://www.merlincyber.com/resource-blog/tag/infographics) ### [ The Critical Role of a People-Centric Approach for Reducing Insider Threats ](https://www.merlincyber.com/resource-blog/critical-role-people-centric-approach-reducing-insider-threats-0) [![Comfort, not Chaos: How to Reduce the Cyber Risk of Healthcare Operational Technology (OT) Solutions](https://www.merlincyber.com/hubfs/Imported_Blog_Media/AdobeStock_306000274-Converted.png) ](https://www.merlincyber.com/resource-blog/comfort-not-chaos-how-to-reduce-the-cyber-risk-of-healthcare-operational-technology-ot-solutions-0) [eBooks](https://www.merlincyber.com/resource-blog/tag/ebooks), [White Papers](https://www.merlincyber.com/resource-blog/tag/white-papers), [Data Sheets](https://www.merlincyber.com/resource-blog/tag/data-sheets) ### [ Comfort, not Chaos: How to Reduce the Cyber Risk of Healthcare Operational Technology (OT) Solutions ](https://www.merlincyber.com/resource-blog/comfort-not-chaos-how-to-reduce-the-cyber-risk-of-healthcare-operational-technology-ot-solutions-0) [![IoT security without unplugging everything](https://www.merlincyber.com/hubfs/AdobeStock_275018287.jpeg) ](https://www.merlincyber.com/hubfs/Merline%20Cyber/PDF%20Files/Swimlane_Case_Study_US_Government_Agency-5-1.pdf) [Case Studies](https://www.merlincyber.com/resource-blog/tag/case-studies), [eBooks](https://www.merlincyber.com/resource-blog/tag/ebooks) ### [ IoT security without unplugging everything ](https://www.merlincyber.com/hubfs/Merline%20Cyber/PDF%20Files/Swimlane_Case_Study_US_Government_Agency-5-1.pdf) [![Zero trust security at the movies](https://www.merlincyber.com/hubfs/AdobeStock_142389459.jpeg) ](https://www.merlincyber.com/resource-blog/zero-trust-security-at-the-movies-0) [Case Studies](https://www.merlincyber.com/resource-blog/tag/case-studies), [Reports](https://www.merlincyber.com/resource-blog/tag/reports), [Videos](https://www.merlincyber.com/resource-blog/tag/videos) ### [ Zero trust security at the movies ](https://www.merlincyber.com/resource-blog/zero-trust-security-at-the-movies-0) ##### Stay up to date on the latest cybersecurity news Share This ** ** ** ** [![Merlin-Cyber-White-Odot_1@4x-300x149](https://www.merlincyber.com/hubfs/Merline%20Cyber/Images/Merlin-Cyber-White-Odot_1@4x-300x149.png) ](https://www-merlincyber-com.sandbox.hs-sites.com/home) 8330 BOONE BLVD, 8TH FLOOR TYSONS, VA 22182 PH: 703-752-2928 TF: 844-639-1936 ABOUT SOLUTIONS MARKETS USE CASES PARTNERS INSIGHTS Copyright 2026 Merlin International | [Privacy Policy](https://5464151.hs-sites.com/privacy-policy/) [** ](https://twitter.com/merlin_cyber) [** ](https://www.linkedin.com/company/merlincyber/)         ![](https://ws.zoominfo.com/pixel/61b7abb24261e1001b0077d6)       ![](https://secure.smart-business-foresight.com/268347.png)