Ransomware
12/14/2020
Ransomware Mitigations to Help You Defend Today and Secure Tomorrow
The below recommendations layout three sets of straightforward steps any organization can take to manage their risk. These recommendations are written broadly for all levels within an organization.
Actions for Today – Make Sure You’re Not Tomorrow’s Headline:
- Backup your data, system images, and configurations and keep the backups offline
- Update and patch systems
- Make sure your security solutions are up to date
- Review and exercise your incident response plan
- Pay attention to ransomware events and apply lessons learned
Actions to Recover If Impacted – Don’t Let a Bad Day Get Worse:
- Work with an experienced advisor to help recover from a cyber attack
- Isolate the infected systems and phase your return to operations
- Review the connections of any business relationships that touch your network
- Apply business impact assessment findings to prioritize recovery
Actions to Secure Your Environment Going Forward – Don’t Let Yourself be an Easy Mark:
- Practice good cyber hygiene; backup, update, whitelist apps, limit privilege, and use multifactor authentication
- Segment your networks; make it hard for the bad guy to move around and infect multiple systems
- Develop containment strategies; if bad guys get in, make it hard for them to get stuff out
- Know your system’s baseline for recovery
- Review disaster recovery procedures and validate goals with executives