Building a ransomware decision tree before the call comes in
Overview
In a recent video, Kerri Shafer-Page, VP of Incident Response at Arctic Wolf, discusses the importance of having a ransomware decision tree in place before an attack occurs. She emphasizes four key areas that organizations need to address ahead of time, starting with how to contain the breach without disrupting critical operations. This involves understanding the network well enough to make informed decisions about taking systems offline. Additionally, organizations need to designate who is authorized to negotiate with attackers and what terms are acceptable. By preparing these strategies in advance, companies can respond more effectively when a ransomware incident strikes, potentially minimizing damage and recovery time. This proactive approach is crucial given the increasing frequency of ransomware attacks affecting various sectors.
Key Takeaways
- Action Required: Establish a ransomware decision tree, define containment strategies, and designate negotiation authorities.
- Timeline: Newly disclosed
Original Article Summary
In this Help Net Security video, Kerri Shafer-Page, VP of Incident Response at Arctic Wolf, walks through the ransomware decision tree in this video. She covers four areas where decisions need settling in advance, starting with containment. Someone has to know the network well enough to judge what pulling a system offline does to client data, a manufacturing line, or a website. Then comes the extortion demand. Who is authorized to negotiate, and what is … More → The post Building a ransomware decision tree before the call comes in appeared first on Help Net Security.
Impact
Not specified
Exploitation Status
No active exploitation has been reported at this time. However, organizations should still apply patches promptly as proof-of-concept code may exist.
Timeline
Newly disclosed
Remediation
Establish a ransomware decision tree, define containment strategies, and designate negotiation authorities.
Additional Information
This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.
Related Topics: This incident relates to Ransomware, Critical.