Ransoms (Part 1): What are the Threats? 

“Phishing continues to be the primary threat vector for ransomware cases. And it’s very difficult, right? Because every company has people with email accounts, I have never literally seen an environment with a 0% click rate on phishing campaigns, which means people are people, they get busy, they make mistakes. So, the bad guys know this, and they really do continue to sort of leverage that as the primary way.” 

-Brenda Sharton, Partner at international leading law firm Dechert and John Ansbach from Stroz Friedberg, a division of Aon 

Listen to the full podcast episode here. 

Ransoms (Part 2): Should You Pay the Ransom? 

“There’s no 100% guarantee that if you make a payment to a threat actor that that they’re going to honor that. And by honor it, I mean, either give you decryption keys, so you can decrypt your systems and/or give you your data back or not publish your data. There’s never a 100% guarantee on that. That being said, I will tell you from our experience, and certainly my personal experience in incident response, threat actors, certainly more often than not, do honor that commitment.”

-Brenda Sharton, Partner at international leading law firm Dechert and John Ansbach from Stroz Friedberg, a division of Aon

Listen to the full podcast episode here.

Ransoms (Part 3): How to Avoid a Ransomware Crisis  

“One way is training – everybody in your organization, from your receptionist, to your CEO and everyone in between, is a point of compromise. What we want is we want people to be trained not just on onboarding, but on an iterative ongoing basis, to help them resist cyber-attacks. This can be everything, from simple training on how to resist phishing, how to identify phishing attacks, the role you can play, how to spot an email that it’s nefarious with a bad attachment.”

-Brenda Sharton, Partner at international leading law firm Dechert and John Ansbach from Stroz Friedberg, a division of Aon

Listen to the full podcast episode here.