Call us now:
Ransomware is a difficult risk to manage. Ransoms occur at the end of a long chain of events that usually starts with the management of cyber risk. Management that many public and private sector organisations find difficult.
Banning ransom payments is a reasonable response; preventing access to funds sends a message to hackers that we won’t pay them. But when you are ransomed, what options are available? While paying ransoms is a difficult pill to swallow, there are few options for companies dealing with a ransom attack. A ban on ransomware payments relies on organisations taking proactive management of cyber risk to prevent the need to pay a ransom in the first place.
Allowing the payment of ransomware under national security grounds is an option. What makes a cyber attack a national security incident? Attacks on Synnovis, Jaguar Land Rover, and Marks and Spencer impacted national security, but only when the attacks unfolded. Who decides what constitutes a ransomware attack as a threat to national security?
Proactive management of cyber risk may have prevented the Synnovis, Jaguar Land Rover, and Marks and Spencer cyber attacks from becoming a threat to national security in the first instance. As we see in the EU, adopting cyber regulation is seen as the most practical approach to managing cyber risk.
@Thaddeus Dziekanowski Brian D. McCarthy
Veritas GRC
#cybersecurity #nationalsecurity
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7402252194290282496