It’s rather difficult to comment on the plans to ban UK public sector bodies and operators of critical national infrastructure, including the…

← Back to Blog

It’s rather difficult to comment on the plans to ban UK public sector bodies and operators of critical national infrastructure, including the state-run health service, local councils and schools, from paying ransom demands to cyber criminals from paying ransom for cyber attack.

The proposal to ban ransomware payments has been written with no rational thought, no knowledge or experience of cybersecurity, the threat landscape or the implication of cyber. Whichever angle you look at this statement nothing stacks up.
1. The public sector is such a small sector in comparison the the private sector. Government can easily influence the public sector, what about the private sector.
2. The public sector is grossly underfunded, under resourced and under managed with respect to cybersecurity. How do they manage cyber.
3. The Public sector in many cases is CNI. With poor cybersecurity.
4. When you’ve been hacked and ransomed, there are few alternatives to ransom payments if you cannot restore your systems.
5. The UK government has no strategy for cybersecurity, specifically defensive cybersecurity.

While one could write many quips on comments made by Ministers, Plans will ‘smash’ cyber criminal business model, minister says. The most simple is ‘No it will not’.

Paying a ransom is a ‘right of bang’ reaction to cybersecurity risk management. We need proactive ‘left of bang’ strategies for the management of cyber risk for the public and private sector. So that organisations are better placed to manage the consequences of a cyber attack and reduce the potential of having to pay a ransom.

@Thaddeus Dziekanowski Brian D. McCarthy Faisal Khan

Veritas GRC

#cybersecurity #cyberriskmanagement #cyberregulation

https://lnkd.in/evkRsDMd

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7353713342210875392