Negotiating with Terrorists: The High Stakes Game of Ransomware Response
summary
Argues that paying can be an analytically defensible business decision by weighing legal constraints, attacker profile, recovery odds and costs; cites a UCSF example where a ~ $1M payment sits against hundreds of millions in at-risk revenue, cites industry data of 99% get some data (4% all back) and typical recovery of one to three months, recommends proactive use of Ransomware Impact Analysis, threat intelligence, vendor SLAs and immutable backups or vendor recovery playbooks to turn emotion into a quantifiable call/raise/fold.
AI-written summary · about
chapters (5)
- 0:00Start
- 2:23Decisions, Decisions
- 21:00Calculating the Odds
- 30:19You're on the Clock
- 37:56"Apply" Slide
related talks
40mA Review of the Ransomware Threat Landscape
38mUnderstanding Response Risk Relative to Ransomware and DoT Guidelines
29mPrevention as a Business Strategy
44mThe Reason Companies Fall Victim to Ransomware Isn’t What You Think
13mData Plays the Victim: What Ransomware Has Taken from the Kidnapping and Ransom Industry
38mRansomware and Backups: A Multi-Layered Defense Strategy
52mMultifaceted Extortion: Insider Look at Ransom Payments and Cyber Defense
27mRansomware: A database survival guide