BrandPost: Ransomware Response in Four Steps

During 2020, the first year in almost a decade that saw businesses cut their IT and security budgets, the global ransomware threat grew even stronger. Now, in 2021, companies are more likely than ever to learn their defenses have been breached by a ransomware gang.If your company becomes a victim, you’ll have to address defense and prevention quickly. Here are the four steps your team must follow:Contain the incidentFirst, minimize the damage. The moment your security team is alerted to ransomware on a computer inside your network perimeter, they must isolate that computer from the network. That done, they should look through logs from your antivirus, firewall, and EDR solutions to see if any other devices were hit, and immediately isolate those as well. They should physically disconnect them from the network as well. The speed of this process is crucial: The faster the reaction, the more of your company’s infrastructure and data you can save.To read this article in full, please click here
Read More