Ransomware

This is no longer just about tech — if it ever was

Surveys focused on the concerns and priorities of the CISO community have been quite consistent over the last few years, and collectively, they paint a slightly uncomfortable picture: The picture of CISO roles and security practices still operating bottom-up, disconnected from the dynamics of the business and the broader culture of their organisation.

Recently, RiskRecon, a Mastercard Company, founder Kelly White, sat down with Sam Olyaei, Director at Gartner Research, and Errol Weiss, Chief Security Officer at Health-ISAC, to discuss their client’s experiences regarding recent trends in third-party risk management. During their discussion, they spoke about the wider impact of cybercrime and ransomware threats.

By Kelly White, Founder, RiskRecon, a Mastercard Company

The impact of a destructive ransomware attack extends far beyond the organization whose systems are encrypted. It harms all those who depend on the goods and services of the organization that criminals have taken offline.

RON ISAACSON, FIELD CTO, US EAST

On January 4, 2022, the Federal Trade Commission (FTC) warned that "It is critical that companies and their vendors relying on Log4j act now, in order to reduce the likelihood of harm to consumers, and to avoid FTC legal action." Additionally, the FTC has expressed a desire to further evaluate the dependency on open-source services and the potential impact on customers. 

A few big hacks in the US and everybody is talking about ransomware again… Time for a few hard truths