{"id":30821,"date":"2018-08-17T21:41:19","date_gmt":"2018-08-17T21:41:19","guid":{"rendered":"https:\/\/one.sightlinemg.com\/c4isrnet\/uncategorized\/2018\/08\/17\/why-you-should-follow-the-1-10-60-rule-of-cybersecurity\/"},"modified":"2026-08-08T18:30:34","modified_gmt":"2026-08-08T18:30:34","slug":"why-you-should-follow-the-1-10-60-rule-of-cybersecurity","status":"publish","type":"post","link":"https:\/\/one.sightlinemg.com\/c4isrnet\/home\/2018\/08\/17\/why-you-should-follow-the-1-10-60-rule-of-cybersecurity\/","title":{"rendered":"Why you should follow the 1-10-60 rule of cybersecurity"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">One of the most common misconceptions of a data breach is that it takes the heaviest toll on the reputations of federal IT leaders, as they are responsible for protecting their agency against a breach. However, headlines from recent data breaches, across both the federal and private sectors, reveal that in addition to the damage a cyber data breach can inflict on an organization\u2019s reputation, there is also a high propensity for serious financial costs to be incurred.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As cybersecurity concerns continue to rise to the top of the agenda of federal agencies, it is important to consider why a particular department may be targeted and how prepared agency leaders are to withstand a sophisticated attack from a cybercriminal or nation-state group.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><b>Breakout Time: A Critical Cyber Metric <\/b><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If a federal entity is in fact breached, speed is one of the most critical factors in the remediation process. CrowdStrike recently unveiled a new cyber metric in <a href=\"https:\/\/www.crowdstrike.com\/resources\/reports\/2018-crowdstrike-global-threat-report-blurring-the-lines-between-statecraft-and-tradecraft\/\"><u>its 2018 Global Threat Report<\/u><\/a>, called \u201cbreakout time.\u201d CrowdStrike found that, on average, organizations only have one hour and 58 minutes to detect and eradicate an intruder before they move from their initial entry point to compromise additional IT systems and wreak havoc on the enterprise.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">There are three key metrics that can help your agency estimate its readiness to defend against a breach:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Time to &nbsp;detect an intrusion<\/li><li>Time to &nbsp;investigate an incident &#8211; understanding the criticality and scope, and &nbsp;what response actions are necessary<\/li><li>Time to &nbsp;respond to the intrusion &#8211; eradicate the adversary, and implement &nbsp;containment measures to avoid any damage<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><b>Best Practices: A Numbers Game <\/b><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The most cyber-prepared federal institutions should aim to detect an intrusion in under a minute, perform a full investigation in under 10 minutes, and eradicate the adversary from the environment in under an hour in order to effectively combat sophisticated cyber threats.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Agencies that follow this 1-10-60 rule are much more likely to eradicate the adversary before the attack leaves its initial entry point, minimizing impact and further escalation. Visibility across the network is also critical to detect stealthy attackers who may behave like insiders. The use of innovative technology such as machine learning, endpoint detection and response, and next-generation antivirus, will expedite the ability to pinpoint known and unknown threats that may be lurking on the network while increasing visibility across all of the endpoints in the enterprise.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><b>Thinking like the Adversary <\/b><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To better understand cyber risks, leaders must think more broadly around digital assets and targets. This requires a change in thought process to try and get into the mind of the adversary. Nation-state and eCrime adversaries often go after high-value assets and targets that include the systems, persons, applications, and data sets that contain the organization\u2019s most valuable data and\/or can grant them access to other critical systems via lateral movement.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Government employees should teach their personnel to think about the big picture when assessing and prioritizing the top assets they need to protect. Cyber threat actors often focus their efforts on an organization\u2019s more senior ranking leaders because of the influence they wield and the information they have access to. As such, those in the federal space need to make sure they have taken the appropriate steps to secure all endpoints within their agency and strive to implement the 1-10-60 rule.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Given today\u2019s sophisticated threat landscape, it is imperative that federal entities and other public sector agencies are aware of the critical data that their particular department presides over and has access to. It is also critical to understand the importance of cyber hygiene and best practices. The 1-10-60 rule and breakout time is a clear benchmark that measures your organization\u2019s cyber readiness to withstand today\u2019s sophisticated threats.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><i>James Yeager is the vice president public sector and healthcare for CrowdStrike.<\/i><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Agencies that follow this 1-10-60 rule are much more likely to eradicate the adversary before a cyberattack leaves its initial entry point.<\/p>\n","protected":false},"author":7,"featured_media":25466,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":29,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":[]},"categories":[106,29,32],"tags":[],"coauthors":[7481],"class_list":["post-30821","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-daily-brief","category-home","category-newsletters"],"acf":{"subheadline":"","legacy_arc_id":"HX3QJUUUVZEPPPXCOKKA6RX2C4","arc_canonical_url":"\/thought-leadership\/2018\/08\/17\/why-you-should-follow-the-1-10-60-rule-of-cybersecurity\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.0 (Yoast SEO v28.1) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Why you should follow the 1-10-60 rule of cybersecurity - C4ISRNet<\/title>\n<meta name=\"description\" content=\"Agencies that follow this 1-10-60 rule are much more likely to eradicate the adversary before a cyberattack leaves its initial entry point.\" \/>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Why you should follow the 1-10-60 rule of cybersecurity\" \/>\n<meta property=\"og:description\" content=\"Agencies that follow this 1-10-60 rule are much more likely to eradicate the adversary before a cyberattack leaves its initial entry point.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/one.sightlinemg.com\/c4isrnet\/home\/2018\/08\/17\/why-you-should-follow-the-1-10-60-rule-of-cybersecurity\/\" \/>\n<meta property=\"og:site_name\" content=\"C4ISRNet\" \/>\n<meta property=\"article:published_time\" content=\"2018-08-17T21:41:19+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-08T18:30:34+00:00\" \/>\n<meta name=\"author\" content=\"James Yeager\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"James Yeager\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\n\t    \"@context\": \"https:\\\/\\\/schema.org\",\n\t    \"@graph\": [\n\t        {\n\t            \"@type\": \"Article\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/home\\\/2018\\\/08\\\/17\\\/why-you-should-follow-the-1-10-60-rule-of-cybersecurity\\\/#article\",\n\t            \"isPartOf\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/home\\\/2018\\\/08\\\/17\\\/why-you-should-follow-the-1-10-60-rule-of-cybersecurity\\\/\"\n\t            },\n\t            \"author\": {\n\t                \"name\": \"migration\",\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/person\\\/cc76c831bb37a926738c8391fca7a3b1\"\n\t            },\n\t            \"headline\": \"Why you should follow the 1-10-60 rule of cybersecurity\",\n\t            \"datePublished\": \"2018-08-17T21:41:19+00:00\",\n\t            \"dateModified\": \"2026-08-08T18:30:34+00:00\",\n\t            \"mainEntityOfPage\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/home\\\/2018\\\/08\\\/17\\\/why-you-should-follow-the-1-10-60-rule-of-cybersecurity\\\/\"\n\t            },\n\t            \"wordCount\": 651,\n\t            \"commentCount\": 0,\n\t            \"publisher\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#organization\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/home\\\/2018\\\/08\\\/17\\\/why-you-should-follow-the-1-10-60-rule-of-cybersecurity\\\/#primaryimage\"\n\t            },\n\t            \"thumbnailUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/AP18226135851836.jpg.jpg\",\n\t            \"articleSection\": [\n\t                \"Daily Brief\",\n\t                \"Home\",\n\t                \"Newsletters\"\n\t            ],\n\t            \"inLanguage\": \"en-US\",\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"CommentAction\",\n\t                    \"name\": \"Comment\",\n\t                    \"target\": [\n\t                        \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/home\\\/2018\\\/08\\\/17\\\/why-you-should-follow-the-1-10-60-rule-of-cybersecurity\\\/#respond\"\n\t                    ]\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"WebPage\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/home\\\/2018\\\/08\\\/17\\\/why-you-should-follow-the-1-10-60-rule-of-cybersecurity\\\/\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/home\\\/2018\\\/08\\\/17\\\/why-you-should-follow-the-1-10-60-rule-of-cybersecurity\\\/\",\n\t            \"name\": \"Why you should follow the 1-10-60 rule of cybersecurity - C4ISRNet\",\n\t            \"isPartOf\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#website\"\n\t            },\n\t            \"primaryImageOfPage\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/home\\\/2018\\\/08\\\/17\\\/why-you-should-follow-the-1-10-60-rule-of-cybersecurity\\\/#primaryimage\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/home\\\/2018\\\/08\\\/17\\\/why-you-should-follow-the-1-10-60-rule-of-cybersecurity\\\/#primaryimage\"\n\t            },\n\t            \"thumbnailUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/AP18226135851836.jpg.jpg\",\n\t            \"datePublished\": \"2018-08-17T21:41:19+00:00\",\n\t            \"dateModified\": \"2026-08-08T18:30:34+00:00\",\n\t            \"description\": \"Agencies that follow this 1-10-60 rule are much more likely to eradicate the adversary before a cyberattack leaves its initial entry point.\",\n\t            \"breadcrumb\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/home\\\/2018\\\/08\\\/17\\\/why-you-should-follow-the-1-10-60-rule-of-cybersecurity\\\/#breadcrumb\"\n\t            },\n\t            \"inLanguage\": \"en-US\",\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"ReadAction\",\n\t                    \"target\": [\n\t                        \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/home\\\/2018\\\/08\\\/17\\\/why-you-should-follow-the-1-10-60-rule-of-cybersecurity\\\/\"\n\t                    ]\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"ImageObject\",\n\t            \"inLanguage\": \"en-US\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/home\\\/2018\\\/08\\\/17\\\/why-you-should-follow-the-1-10-60-rule-of-cybersecurity\\\/#primaryimage\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/AP18226135851836.jpg.jpg\",\n\t            \"contentUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/AP18226135851836.jpg.jpg\"\n\t        },\n\t        {\n\t            \"@type\": \"BreadcrumbList\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/home\\\/2018\\\/08\\\/17\\\/why-you-should-follow-the-1-10-60-rule-of-cybersecurity\\\/#breadcrumb\",\n\t            \"itemListElement\": [\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 1,\n\t                    \"name\": \"Home\",\n\t                    \"item\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/\",\n\t                    \"ad_zone\": \"home\"\n\t                },\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 2,\n\t                    \"name\": \"Home\",\n\t                    \"item\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/home\\\/\",\n\t                    \"ad_zone\": \"home\"\n\t                },\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 3,\n\t                    \"name\": \"Why you should follow the 1-10-60 rule of cybersecurity\"\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"WebSite\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#website\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/\",\n\t            \"name\": \"C4ISRNet\",\n\t            \"description\": \"Media for the Intelligence-Age Military | C4ISRNET\",\n\t            \"publisher\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#organization\"\n\t            },\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"SearchAction\",\n\t                    \"target\": {\n\t                        \"@type\": \"EntryPoint\",\n\t                        \"urlTemplate\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/?s={search_term_string}\"\n\t                    },\n\t                    \"query-input\": {\n\t                        \"@type\": \"PropertyValueSpecification\",\n\t                        \"valueRequired\": true,\n\t                        \"valueName\": \"search_term_string\"\n\t                    }\n\t                }\n\t            ],\n\t            \"inLanguage\": \"en-US\"\n\t        },\n\t        {\n\t            \"@type\": \"Organization\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#organization\",\n\t            \"name\": \"C4ISRNet\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/\",\n\t            \"logo\": {\n\t                \"@type\": \"ImageObject\",\n\t                \"inLanguage\": \"en-US\",\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/logo\\\/image\\\/\",\n\t                \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/c4isrnet-logo-white.png\",\n\t                \"contentUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/c4isrnet-logo-white.png\",\n\t                \"caption\": \"C4ISRNet\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/logo\\\/image\\\/\"\n\t            }\n\t        },\n\t        {\n\t            \"@type\": \"Person\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/person\\\/cc76c831bb37a926738c8391fca7a3b1\",\n\t            \"name\": \"migration\",\n\t            \"image\": {\n\t                \"@type\": \"ImageObject\",\n\t                \"inLanguage\": \"en-US\",\n\t                \"@id\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec\",\n\t                \"url\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t                \"contentUrl\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t                \"caption\": \"migration\"\n\t            },\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/author\\\/migration\\\/\"\n\t        }\n\t    ]\n\t}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Why you should follow the 1-10-60 rule of cybersecurity - C4ISRNet","description":"Agencies that follow this 1-10-60 rule are much more likely to eradicate the adversary before a cyberattack leaves its initial entry point.","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"Why you should follow the 1-10-60 rule of cybersecurity","og_description":"Agencies that follow this 1-10-60 rule are much more likely to eradicate the adversary before a cyberattack leaves its initial entry point.","og_url":"https:\/\/one.sightlinemg.com\/c4isrnet\/home\/2018\/08\/17\/why-you-should-follow-the-1-10-60-rule-of-cybersecurity\/","og_site_name":"C4ISRNet","article_published_time":"2018-08-17T21:41:19+00:00","article_modified_time":"2026-08-08T18:30:34+00:00","author":"James Yeager","twitter_card":"summary_large_image","twitter_misc":{"Written by":"James Yeager","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/home\/2018\/08\/17\/why-you-should-follow-the-1-10-60-rule-of-cybersecurity\/#article","isPartOf":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/home\/2018\/08\/17\/why-you-should-follow-the-1-10-60-rule-of-cybersecurity\/"},"author":{"name":"migration","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/person\/cc76c831bb37a926738c8391fca7a3b1"},"headline":"Why you should follow the 1-10-60 rule of cybersecurity","datePublished":"2018-08-17T21:41:19+00:00","dateModified":"2026-08-08T18:30:34+00:00","mainEntityOfPage":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/home\/2018\/08\/17\/why-you-should-follow-the-1-10-60-rule-of-cybersecurity\/"},"wordCount":651,"commentCount":0,"publisher":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#organization"},"image":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/home\/2018\/08\/17\/why-you-should-follow-the-1-10-60-rule-of-cybersecurity\/#primaryimage"},"thumbnailUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/AP18226135851836.jpg.jpg","articleSection":["Daily Brief","Home","Newsletters"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/one.sightlinemg.com\/c4isrnet\/home\/2018\/08\/17\/why-you-should-follow-the-1-10-60-rule-of-cybersecurity\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/home\/2018\/08\/17\/why-you-should-follow-the-1-10-60-rule-of-cybersecurity\/","url":"https:\/\/one.sightlinemg.com\/c4isrnet\/home\/2018\/08\/17\/why-you-should-follow-the-1-10-60-rule-of-cybersecurity\/","name":"Why you should follow the 1-10-60 rule of cybersecurity - C4ISRNet","isPartOf":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#website"},"primaryImageOfPage":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/home\/2018\/08\/17\/why-you-should-follow-the-1-10-60-rule-of-cybersecurity\/#primaryimage"},"image":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/home\/2018\/08\/17\/why-you-should-follow-the-1-10-60-rule-of-cybersecurity\/#primaryimage"},"thumbnailUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/AP18226135851836.jpg.jpg","datePublished":"2018-08-17T21:41:19+00:00","dateModified":"2026-08-08T18:30:34+00:00","description":"Agencies that follow this 1-10-60 rule are much more likely to eradicate the adversary before a cyberattack leaves its initial entry point.","breadcrumb":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/home\/2018\/08\/17\/why-you-should-follow-the-1-10-60-rule-of-cybersecurity\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/one.sightlinemg.com\/c4isrnet\/home\/2018\/08\/17\/why-you-should-follow-the-1-10-60-rule-of-cybersecurity\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/home\/2018\/08\/17\/why-you-should-follow-the-1-10-60-rule-of-cybersecurity\/#primaryimage","url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/AP18226135851836.jpg.jpg","contentUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/AP18226135851836.jpg.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/home\/2018\/08\/17\/why-you-should-follow-the-1-10-60-rule-of-cybersecurity\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/one.sightlinemg.com\/c4isrnet\/","ad_zone":"home"},{"@type":"ListItem","position":2,"name":"Home","item":"https:\/\/one.sightlinemg.com\/c4isrnet\/home\/","ad_zone":"home"},{"@type":"ListItem","position":3,"name":"Why you should follow the 1-10-60 rule of cybersecurity"}]},{"@type":"WebSite","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#website","url":"https:\/\/one.sightlinemg.com\/c4isrnet\/","name":"C4ISRNet","description":"Media for the Intelligence-Age Military | C4ISRNET","publisher":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/one.sightlinemg.com\/c4isrnet\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#organization","name":"C4ISRNet","url":"https:\/\/one.sightlinemg.com\/c4isrnet\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/logo\/image\/","url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/06\/c4isrnet-logo-white.png","contentUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/06\/c4isrnet-logo-white.png","caption":"C4ISRNet"},"image":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/person\/cc76c831bb37a926738c8391fca7a3b1","name":"migration","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec","url":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","caption":"migration"},"url":"https:\/\/one.sightlinemg.com\/c4isrnet\/author\/migration\/"}]}},"jetpack_sharing_enabled":true,"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"C4ISRNet","distributor_original_site_url":"https:\/\/one.sightlinemg.com\/c4isrnet","push-errors":false,"jetpack_featured_media_url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/AP18226135851836.jpg.jpg","_links":{"self":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts\/30821","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/comments?post=30821"}],"version-history":[{"count":1,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts\/30821\/revisions"}],"predecessor-version":[{"id":30826,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts\/30821\/revisions\/30826"}],"wp:attachment":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/media?parent=30821"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/categories?post=30821"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/tags?post=30821"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/coauthors?post=30821"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}