A Ransomware Tale

Cybersecurity is a strategic business enterprise risk. Double extortion ransomware is the latest iteration of cybercrime that keeps the C-suite up at night. The gaps in your privacy program are laid bare in a ransomware situation. What do you do when your IT director calls and tells you your network has been encrypted and there is a ransom note demanding $500,000? Did the threat actor exfiltrate data? Do you contact the threat actor, and how do you negotiate? What do you tell your customers and employees while you try to get your network running again? When do you call law enforcement? How long will your forensic investigation take? Will the attorney general knock on your door?