Three Steps to Cyber-Resilience Against Ransomware Attacks

The following are federal tips:

Three Steps to Resilience Against Ransomware: 

1. Back-Up Your Systems – Now (and Daily) 

Immediately and regularly back up all critical agency and system configuration information on a separate device and store the back-ups offline, verifying their integrity and restoration process. If recovering after an attack, restore a stronger system than you lost, fully patched and updated to the latest version. 

2. Reinforce Basic Cybersecurity Awareness and Education 

Ransomware attacks often require the human element to succeed. Refresh employee training on recognizing cyberthreats, phishing and suspicious links — the most common vectors for ransomware attacks. Remind employees of how to report incidents to appropriate IT staff in a timely manner, which should include out-of-band communication paths. 

3. Revisit and Refine Cyber Incident Response Plans 

Agencies must have a clear plan to address attacks when they occur, including when internal capabilities are overwhelmed. Make sure response plans include how to request assistance from external cyber first responders, such as state agencies, CISA and the MS-ISAC, in the event of an attack. 

Additional Resources 

• MS-ISAC Security Primer on Ransomware 
• CISA Tip Sheet on Ransomware 
• NGA Disruption Response Planning Memo 
• NASCIO Cyber Disruption Planning Guide