In today's interconnected commercial landscape, ransomware has evolved into a persistent and challenging operational risk. Its prevalence highlights a critical need for robust cyber security measures, yet it's clear there is no simple solution or 'silver bullet' to eradicate the threat entirely.
Operating a successful organisation in the digital age inherently involves accepting certain risks. The challenge with ransomware is that the perpetrators are often skilled, highly motivated, and operate from jurisdictions around the globe. This geographic dispersal makes it exceptionally difficult for law enforcement agencies to identify, track, and bring these cyber-criminals to justice, creating a low-risk, high-reward environment for them.
One might have anticipated that disruptive attacks on essential public services, including healthcare and national infrastructure, would provoke a decisive, unified response from governments worldwide. However, a coordinated international crackdown has yet to materialise, for a host of complex geopolitical reasons that fall outside the scope of this discussion.
The question of whether an organisation should pay a ransom is fraught with difficulty, and there is no universal right answer. In situations where critical operations are brought to a standstill, potentially affecting thousands or even millions of individuals, the pressure to pay can be immense. Yet, this course of action directly finances criminal enterprises. It remains one of the most challenging ethical and strategic dilemmas a leadership team can face in the wake of an attack.
Get Unlimited access to ALL the LIVE Instructor-led Security courses you want - all for the price of less than one course.
The contrast between an essential business operation but an uncontrollable threat? We need to communicate and network globally in order to reach our clients, citizens and suppliers. We cannot count on law enforcement to be a deterrence to attacks, and the cost of attacks is increasing and onerous.
Becoming a victim of ransomware may be unavoidable.
Many organizations that have excellent security people on staff or are working with top-flight consulting firms have become victims despite their best efforts.
(There were many others that became victims through poor practices, but let’s look for solutions not blame).

CONSTANTLY Backup, practice restoring systems until it becomes second nature (automate it if possible).
Educate and create a security conscious culture, preferably auto-updated but also regularly checking.
Have plans in place to be ready for an attack. Address communications with clients, employees, suppliers, media and regulatory bodies.
The contrast between an essential business operation but an uncontrollable threat? We need to communicate and network globally in order to reach our clients, citizens and suppliers. We cannot count on law enforcement to be a deterrence to attacks, and the cost of attacks is increasing and onerous.
I will not advise whether or not to pay the ransom. We have seen cases where essential business operations would be crippled resulting in enormous impact to millions of people and perhaps the ransom was justified. But do we want to support criminal activity? Tough question.
Becoming a victim of ransomware may be unavoidable. Many organizations that have excellent security people on staff or are working with top-flight consulting firms have become victims despite their best efforts. (There were many others that became victims through poor practices, but let’s look for solutions not blame).
Be safe – be secure
You may be also be interested in IT-security courses: Learn all about Readynez IT-security training here
Stay up to date on current developments in the Tech world related to Skills.