Agencies tout updated ransomware reduction resource

Four agencies are espousing the benefits of a newly published updated resource they indicated seeks to help organizations reduce the risk of ransomware incidents through a series of best practices.

The Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), National Security Agency (NSA), and Multi-State Information Sharing and Analysis Center (MS-ISAC) collaborated to develop the #StopRansomware Guide, which the agencies maintain served as an updated version of the 2020 guide containing additional recommended actions, resources, and tools. 

The publication was produced via the Joint Ransomware Task Force (JRTF) as a means of ensuring unity of effort in combating the threat of ransomware attacks.

“With our partners on the Joint Ransomware Task Force, CISA is focused on taking every action possible to support individuals and businesses, including ‘target-rich, cyber-poor’ entities like hospitals and K-12 schools, by providing actionable resources and information,” CISA Executive Assistant Director for Cybersecurity Eric Goldstein said. “We must collectively evolve to a model where ransomware actors are unable to use common tactics and techniques to compromise victims and where ransomware incidents are detected and remediated before harm occurs. With our FBI, NSA, and MS-ISAC partners, we strongly encourage all organizations to review this guide and implement recommendations to prevent potential ransomware incidents.”

Goldstein said in order to address the ransomware epidemic, there must be a reduction in the prevalence of ransomware intrusions and a reduction of their impacts, which includes applying lessons learned from ransomware incidents that have impacted many organizations.

The guide seeks to aid organizations in reducing the risk of ransomware incidents through best practices to detect, prevent, respond, and recover – incorporating step-by-step approaches to address potential attacks, per officials.