Ransomware encrypts files or systems and demands payment for their recovery.
A successful ransomware incident can stop an organisation from operating.
Backups are one of the most important defences against ransomware.
Businesses should maintain backup copies that cannot easily be modified or encrypted by compromised computers.
Business computers and servers should use centrally managed security software.
Administrators should be able to monitor alerts and identify unprotected systems.
Attackers often exploit known software vulnerabilities.
Operating systems, applications, firewalls and other infrastructure should be kept updated.
MFA should protect remote access, Microsoft 365 and other important cloud services.
Users should not have administrative privileges unless required.
Administrator accounts should also be separated from normal day-to-day accounts where practical.
Employees should understand the risks associated with
- Unexpected attachments
- Fake Microsoft login pages
- Suspicious links
- Fraudulent invoices
- Unknown USB devices
Businesses should know how they would restore critical servers and data before ransomware happens.
RepairIT can help design backup, endpoint protection and recovery solutions that reduce ransomware risk.
Need help with this? RepairIT can review your environment and recommend practical next steps for your business.