TLDR:
- Organizations are losing the ransomware battle due to a lack of resilience to basic cybersecurity practices.
- Three key actions to improve resilience include recommitting to foundational practices, ensuring they are institutionalized, and measuring and improving their effectiveness.
Key Points: Successful ransomware attacks are on the rise not because of sophisticated design, but due to organizations lacking resilience to basic cybersecurity practices. Implementing and sustaining fundamental cybersecurity practices is challenging, leading to gaps in ransomware defenses. To improve resilience, organizations can recommit to foundational practices like 2FA, ensure they are “institutionalized” with proper documentation and support, and measure and improve their effectiveness over time.