Senior Business Resilience and Continuity Consultant, Asfalis Advisors.
Founder and Chief Resilience Officer, Asfalis Advisors.
J Bus Contin Emer Plan. 2023 Jan 1;16(4):294-303.
Ransomware attacks are increasing in complexity, scope and frequency. These attacks have had mounting impacts on critical global infrastructures and populations, with significant financial ramifications. This paper underscores the business case for the investment and execution of preparedness efforts to increase the readiness and resilience of business and technology teams. It begins by exploring the present characteristics of ransomware and the landscape of organisational preparedness, as described in various reports cataloguing current and forecasted trends in the field. This is supported by a commentary on recent noteworthy ransomware attacks. Emergency management, crisis management and general business development strategies are then merged to inform and offer actionable solutions for immediate implementation. The paper describes a systematic approach that provides opportunities to embed ransomware preparedness efforts into broader organisational strategies and goals. The business case concludes that investment in ransomware exercises offers additional benefits to organisations and companies, including employee retention and goal attainment.
勒索软件攻击的复杂性、范围和频率都在不断增加。这些攻击对全球关键基础设施和人口造成了越来越大的影响，带来了重大的财务影响。本文强调了投资和执行准备工作的商业案例，以提高业务和技术团队的准备程度和弹性。本文首先探讨了勒索软件的当前特征和组织准备情况，这是通过各种报告描述的，这些报告记录了该领域当前和预测的趋势。最近一些值得注意的勒索软件攻击的评论支持了这一点。然后，应急管理、危机管理和一般业务发展战略被合并，为立即实施提供信息和可行的解决方案。本文描述了一种系统方法，为将勒索软件准备工作纳入更广泛的组织战略和目标提供了机会。商业案例的结论是，投资于勒索软件演习为组织和公司带来了额外的好处，包括员工保留和目标实现。
