The trend is toward “a correlation between higher ransom demands in cases where exfiltration has occurred,” she adds, based on what the extorters believe organizations can pay. “We're also seeing that threat actors are getting a lot smarter about exactly what type of information they're taking out of the door with them: usually sensitive in nature, or financial data that helps strengthen their side of the negotiation.”
Cyber attacks happen to all types of organizations, and, globally, big-name corporations and non-profits alike have been bilked of billions of dollars. “No information is immune, and ransomware is size- and industry-agnostic,” says Roth; yet, she says, from what they have seen, only 64 per cent of organizations have a structured incident response plan to a cyber attack.
“I can't tell you the amount of times I've been on calls” where the wrong people are on the call – i.e., no IT staff -- and “where clients don't know where their critical data is sitting in their environment,” or whether they have a tested backup system.
In addition to an incident response plan, organizations can work with “breach” coaches ahead of the potential event, to better prepare them, for example, “to be upfront with partners or employees” about the breach.
Cyber risk management is a growing field, Roth confirms; “data exfiltration is not going away,” and cyber attackers may become more sophisticated in circumnavigating advanced security measures that have been put in place to prevent it.
June 04, 2021 at 04:45AM
https://ift.tt/3vT4ADX
Cyber attacks more sophisticated, data exfiltration 'not going away': risk expert - Canadian Lawyer Magazine
https://ift.tt/2WinW4G
Bagikan Berita Ini
0 Response to "Cyber attacks more sophisticated, data exfiltration 'not going away': risk expert - Canadian Lawyer Magazine"
Post a Comment