Call us now:
Not so much the wrong idea at the wrong time. More an ill thought through, knee jerk reaction to a problem that is more sound bite, than a solution to fix the problem. A solution that cannot be delivered without regulation (pretty please won’t work). As most organisations have no mechanism to manage cybersecurity, and for those companies that provide CNI services, the only short term solution to getting those services up and running maybe to pay a ransom, albeit at risk.
Before a ransomware ban can be effective, foundations need to be laid for cybersecurity risk management of the public and private sector. Governments need to provide solutions to enable organisation to manage cybersecurity risk, solutions that governments understand can only be delivered through regulation. By way of example governments in the U.S and EU are moving to regulate cybersecurity risk management.
Regulation shifts cyber risk ‘Left of Bang’ requiring covered entities demonstrate their management of cyber risk. That in turn requires them to implement and demonstrate appropriate cyber risk management. AKA laying the foundations for cybersecurity. Regulation also provide the baseline standard for cybersecurity compliance, the bar to which customers, suppliers and insurers can use to assess adequate compliance. Where compliance can be tested, and a pass or fail assessment can be made.
Palatability is one thing, effective delivery is something completely different. When time is of the essence, the only viable option at present maybe to pay a ransom. Ahead of a road map to get public and private sector cyber maturity up.
Ted Dziekanowski Brian D. McCarthy
Veritas GRC
#cybersecurity #cyberriskmanagement #cyberinsurance #cyberattack #ransomwareattack
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7150028579500617728