Today’s cyber threat landscape is extremely challenging. Ransom this, ransom that, ransom everywhere – information technology (IT) professionals must work to protect organizations against the next big ransomware attack. Over the years, the sophistication of ransomware attacks has increased as well as the amount of money demanded and paid out in exchange for the ransom-held information. This is why it is extremely important that organizations equip their employees with the knowledge and awareness necessary to identify activities that lead to such attacks. 

Cybersecurity Awareness

Preventing and responding to ransomware attacks require an awareness of ransomware threat vectors as well as a people-processes-technology approach to mitigating associated risks. Employees must understand how to detect and avoid common attack vectors. This requires strong cybersecurity awareness and training. As part of the training, employees should be presented with a policy that instructs them to:

  • Identify and avoid common attack vectors (e.g., phishing attempts)
  • Delete suspicious emails containing links
  • Avoid visit malicious websites

There’s some evidence that United States employees may lack knowledge of the increase in ransomware attacks as well the more damaging and destructive nature and scope of the attacks. In June 2021, Armis reported the results of survey responses for over 2,000 respondents from across the United States. Based on the findings, it was evident that end users are not paying attention to major cybersecurity attacks plaguing operational technology and critical infrastructure across the country, signaling the importance of businesses prioritizing a focus on security as employees return to the office. The report included findings in the following four areas:

  • Education and Awareness of Cyberattacks
  • Severity and Lasting Impact of Attacks
  • Attacks that Target Healthcare
  • Bring Your Own Device (BYOD)

The results indicated that respondents were unaware of the most recent and damaging cyber attacks despite the news (Read more...)