5 ways to better prepare your organization for a ransomware attack

Image: Rzt_Moster/Shutterstock

A palmy ransomware onslaught tin overwhelm an enactment arsenic we've seen galore times, particularly implicit the past respective months. But portion astir organizations admit the menace and hazard of specified attacks, however galore are genuinely acceptable to support themselves against one? New accusation from Deloitte examines whether organizations are decently prepared against a ransomware onslaught and offers proposal connected however to combat specified attacks.

SEE: Ransomware: A cheat expanse for professionals (TechRepublic)

Conducting an online survey of 50 C-suite and different executives successful June 2021 astir cyber menace detection and response, Deloitte recovered that astir 87% expected the fig of cyberattacks targeting their organizations to summation implicit the adjacent 12 months. Further, 65% of the respondents cited ransomware arsenic their top information interest implicit the adjacent year.

However, lone immoderate are afloat acceptable for specified an attack, specifically conscionable 33% said they've tally simulated ransomware attacks to hole themselves for this benignant of incident. Some 54% said that they person an incidental effect program for cyberattacks successful wide but thing circumstantial to ransomware. And 6% admitted that they're mostly unprepared for immoderate benignant of attack.

"As immoderate ransomware tin evade antivirus tools and attackers find much ways to unit victims to wage ransoms, these attacks often person nationalist and planetary repercussions," said Curt Aubley, Deloitte Risk & Financial Advisory's observe and respond signifier leader. "There's nary clip to discarded erstwhile it comes to honing and investigating incidental effect programs for ransomware and different cyber events."

But to beryllium effective, cyber hazard absorption and lawsuit mentation programs request enactment from the enforcement and board-level areas of an organization, according to Kieran Norton, Deloitte Risk & Financial Advisory's infrastructure information solution leader. Top executives indispensable recognize the relation they play successful preventing an attack, namely by offering oversight, governance and code from the apical arsenic good arsenic nonstop enactment for onslaught responses.

SEE: Infographic: The 5 phases of a ransomware attack (TechRepublic)

To find however prepared they are to grip a ransomware attacks, concern leaders should inquire the pursuing 5 questions, Norton recommends.

1. Does your organization's cyber incidental effect program specifically code ransomware attacks? Many organizations person created and tested cyber incidental effect plans but not each person specified a program and not each plans straight absorption connected ransomware attacks. 
2. Has your enactment considered Zero Trust to boost your information posture against ransomware and different threats? Cybercriminals tin easy exploit information gaps created by integer transformation, M&A activity, accelerated unreality adoption and distant work. Removing the automatic oregon inherited spot fixed to users, workloads, networks and devices tin assistance your enactment compensate for these gaps.
3. Does your enactment admit however ransomware attackers tin exploit your usage of emerging technologies to propagate attacks? And are you leveraging emerging technologies to amended support our enactment from those threats? Certain technologies implemented by companies arsenic portion of their integer translation process tin payment attackers successful definite ways. But you tin besides usage those technologies to your advantage. The extremity is to recognize however these technologies summation your cyber hazard vulnerability and however to usage them to amended your security.
4. How does your enactment trial for ransomware vulnerabilities? Frequent penetration investigating tin assistance you place cardinal vulnerabilities to larn however captious systems and assets tin beryllium accessed. Business continuity and catastrophe betterment investigating tin find if redundant backups are disposable to enactment your concern resiliency place. But ransomware tin easy propagate passim your network, truthful accepted backup and betterment plans whitethorn not beryllium enough. Testing your ransomware incidental effect plans done simulations tin assistance physique "muscle memory" astir roles, responsibilities and protocols successful the lawsuit of an attack.
5. Does your enactment behaviour menace hunting to assistance negociate ransomware risk? Many organizations are going connected the discourtesy successful cyber hazard absorption by proactively identifying caller onslaught patterns and caller attackers earlier they tin origin damage. By uncovering undetected ransomware, malware and different cyber threats, you tin analyse and remediate imaginable threats earlier they get retired of hand.

Also see

• Ransomware: What IT pros request to cognize (free PDF) (TechRepublic)
• Ransomware attackers are present utilizing triple extortion tactics (TechRepublic)
• How to forestall different Colonial Pipeline ransomware attack (TechRepublic)
• SolarWinds attack: Cybersecurity experts stock lessons learned and however to support your business (TechRepublic)
• How to go a cybersecurity pro: A cheat sheet (TechRepublic)
• Hiring Kit: Cybersecurity Engineer (TechRepublic Premium)
• Cybersecurity and cyberwar: More must-read coverage (TechRepublic connected Flipboard)