Kevin Beaumont on Nostr: One of the defining things I’ve seen at every org I’ve talked to about ransomware ...
One of the defining things I’ve seen at every org I’ve talked to about ransomware preparedness is they’ve spent more time deciding if and how they would pay a ransom - who gets the call, the CEO, the board etc - than actually preparing cyber resilience.
Orgs are discussing the wrong thing first because it’s seen as completely normal to pay. That’s all our fault.
Published at
2024-03-04 06:44:57Event JSON
{
"id": "9ee9ca39b2b3fd4ed2ca97ab46c52116265ab179032522cd0de7190e4caf074f",
"pubkey": "f6870afcde4480ec8508f50304859e14a51309ff24ab3f0f862c52bdc4af8747",
"created_at": 1709534697,
"kind": 1,
"tags": [
[
"e",
"28d6a55e2292979c96ac0f2a411c3d29ed8b05411e33f7002fa221fa16c2cc06",
"wss://relay.mostr.pub",
"reply"
],
[
"proxy",
"https://cyberplace.social/users/GossiTheDog/statuses/112036065950341893",
"activitypub"
]
],
"content": "One of the defining things I’ve seen at every org I’ve talked to about ransomware preparedness is they’ve spent more time deciding if and how they would pay a ransom - who gets the call, the CEO, the board etc - than actually preparing cyber resilience. \n\nOrgs are discussing the wrong thing first because it’s seen as completely normal to pay. That’s all our fault.",
"sig": "b658e0fe72c772a75e4bc6c4de16a7a058188071c0a9e6cd9679afdc7ed2aff20587f9a92886b45615b08d38bb77130b6c9acf7c8840fa96c56f91f0e3c42cae"
}