Ransomware attacks continue to impact organizations worldwide—and the costs are staggering. A new survey by Arcserve of over a thousand IT decision-makers at small and midsize companies across India, found that 63% had been targeted by a ransomware attack, with 67% asked to pay over ‘$10k – $100k in ransom, 17 % to pay between $100k – $1m and another 17% to pay in ‘$10m – $100m.
These numbers are not expected to improve soon. The sad truth is that, despite spending billions on cybersecurity tools, businesses are still poorly prepared for ransomware attacks. Only around 18% of all respondents to the survey said they’re very confident in their ability to recover lost data in the event of a ransomware attack. Smaller businesses are even less well prepared.
Meanwhile, the attack surface continues to expand as organizations using technologies like IoT, artificial intelligence, and 5G generate even more data—data that can be compromised and held captive by ransomware attackers.
For this reason, companies must take a new approach to data resilience. They must strengthen their disaster-recovery strategies, backup systems, and immutable storage solutions to prevent the loss of mission-critical data. Many organizations do invest on strategies for data resilience. The survey also found that 49% of organizations in India are making additional investments to protect against ransomware attacks, with the top areas of investment being security software, training and certification (33%), and managed services (35%).
While these investments are encouraging, more should be done. Because, for most companies, it’s not a matter of if their data will be compromised; it’s a matter of when. With ransomware attacks increasing yearly, data backup and recovery should be at the very top of every organization’s priority list.
Here are five steps businesses can take now to reduce their exposure to ransomware and avoid staggering losses.
1. Educate employees
It’s essential to invest in training for staff so that they’re aware of how ransomware works. From there, employees will be better prepared to recognize and prevent it. They should know that ransomware can sneak in from anywhere. The training should remind them to scrutinize every link in emails and not open attachments in unsolicited emails.
Employees should be reminded to download only software—especially free—from websites they know and trust.
When possible, employees should verify the integrity of downloaded software through a digital signature before execution.
2. Focus on cures as well as prevention
Companies continue to invest loads of money in cybersecurity solutions like next-generation firewalls and extended detection and response (XDR) systems designed to prevent attacks. Yet these same companies are still falling prey to ransomware and being forced to pay a hefty price.
It’s time for companies to stop focusing entirely on prevention. They should also invest in curative measures like backup & recovery and immutable storage that allow them to quickly restore their data and avoid paying the ransom when attackers break in.
Regular data backups and encryption play a key role in protecting an organization’s data. A consistent backup schedule will enable you to seamlessly restore any compromised systems or data. Multi-factor authentication (MFA) can again help in enforcing zero-trust. MFA makes it difficult for an unauthorized person to access end-points that can compromise network security. If one factor is compromised or broken, the attacker still has at least one or more barriers to breach before successfully breaking into the target. Other than that, encrypting your sensitive data is also highly recommended. After all, if ransomware attackers gain access to your critical assets, encryption has the benefit of keeping data from being read and further exploited by the bad guys.
3. Place a premium on data resilience
Your data resilience is only as strong as your weakest link. Monitor your weaknesses, fix them when you find them, and you can bounce back quickly from disruption and return to normal operation. To do this, you must have the technologies required to back up your data and recover it if necessary, along with the proper mindset. That means a defensive posture is regularly sustained with drills that simulate an intrusion to measure your resiliency and bolster it where necessary.
Many companies develop a strategy and then neglect to test it. That’s like a basketball team devising a sophisticated defense and never bothering to practice it. All companies should regularly test their data backup and recovery plans to ensure they can effectively restore their data and systems if an attack or natural disaster occurs.
4. Know what data is most critical
Data varies in value. If you’re concerned about costs, as most organizations are these days, you don’t have to store or back up all your data in the same place. Look into storage solutions that provide options like data tiering. These enable you to place less-important data in less-expensive levels of storage or “tiers.”
Another upside of data tiering is lower energy costs. You’ll use less compute power if you’re not storing every last byte of your data at the highest security level.
5: Put a disaster-recovery plan in place
Despite all the preventive measures you take, you need to prepare for the possibility that you will get hit. So, it would be best if you had a disaster-recovery plan. You need to be able to back up data as often as is appropriate—ideally every 15 minutes for critical data. You also need to easily verify that your whole environment is backed up, including your remote workers and any SaaS applications you use, such as Microsoft 365.
A good disaster-recovery solution will back up your data to a location of your choice and on a schedule that suits you. It will also be easy to test, which is crucial because testing is the only way you can validate that your recovery-time goals can be met. It may seem obvious, but this is where a lot of solutions fall short. Your disaster-recovery solution must be able to recover your data every time and on time. When ransomware hits, you want to be confident you can recover your data and get on with business as soon as possible.
Final takeaway
There is no perfect defense against ransomware. The best approach is a multilayered one that includes educating your staff, investing in reliable data backup & recovery and immutable storage solutions, and having a robust disaster recovery plan. That’s how organizations can stay ahead of this growing threat and protect their data and bottom line.
About the author:
Nikhil Korgaonkar is Regional Director at Arcserve India & SAARC.
