Many incident response plans focus on what to do after an attack starts. Isolate the infected devices. Contact your IR firm. Notify legal. All sound advice, but only useful if you already know who to call, where your backups live, and which systems the business cannot survive without.

Ransomware-kravene steg med 47 % sidste år. Alligevel nægtede et rekordstort antal organisationer at betale. Man skulle tro, at disse to tendenser ville presse omkostningerne ned. Det har de ikke gjort.