Ransomware: From the Boardroom to the Situation Room
summary
Simulated Situation Room walks through concrete facts: simultaneous disruptions to a Northeast power grid, a Cincinnati water plant, and a California chemical facility caused by ransomware nodes on servers after adversaries lurked three to six months; evidence points at a criminal gang with IRGC ties and medium confidence attribution. Interagency actions: CISA/ISACs/ JCDC share indicators, FBI pursues disruption and crypto seizures, NSA/USCYBERCOM prepare cyber‑destructive options, and a TriSeal advisory counters disinformation — officials then vote between law enforcement, sanctions, or military cyber responses.
AI-written summary · about
chapters (5)
- 0:00Introduction and setup
- 3:01Situation Room meeting begins
- 19:37Intelligence and attribution update
- 30:59Response options and vote
- 46:04Audience decision and Q&A
related talks
27mRansomware in ICS: Impacting Critical Infrastructure and Operations
21mRansomware Attack: Lessons Learned
54mExperience a simulated ransomware event: Learn now to prevail later
52mRansomware; The Real Pandemic
37mRansomware Resilience: Holistic Defense for SOC Leaders
41mRansomware Incident Response - The Real-World Story of a Ransomware Attack
40mIncident Response – How to Give the Advantage to the Hackers!
40mRansomware Threat Landscape