Security News > 2022 > June > Detection, isolation, and negotiation: Improving your ransomware preparedness and response

The numbers are staggering if not overwhelming, and make it abundantly clear that ransomware attacks are not a threat that any organization, however big or small and across industries, can afford to ignore.

Prevention includes the implementation of best practices and measures that can stop ransomware events from happening while also positioning the organization to sustain as little as damage as possible, should an attack occur.

Create an Incident Response playbook that contains all relevant information related to responding to a ransomware attack.

To limit its spread, isolation should be your organization's first priority after you realize a ransomware attack is targeting your organization.

Once you have successfully caught and halted a ransomware attack's progression, it is critical to have a response plan already in place to help you save time making decisions and keep emotional reactions in check, which can occur during a potential emergency.

It is always advisable to use a professional who is familiar with threat actor engagement, ransomware attacks, and the legal obligations of ransomware victims; knowledge of current cyber extortion trends, threat actor TTPs, and threat actor groups is also important.

News URL

https://www.helpnetsecurity.com/2022/06/28/improving-ransomware-preparedness/