CLOUD AND CYBER
The cost of recovery and the resulting downtime in the aftermath of a ransomware attack – as well as the reputational damage – can be 10 to 15 times more than the ransom , according to Gartner .
employee education is key . “ Staff need to be empowered to understand all security threats and be aware of the risks created by remote and hybrid working , such as when a family shares passwords or corporate resources are accessed on personal machines .”
Employees must understand the dangers as well as the reasoning behind measures such as Zero Trust , so they ’ re not tempted to bypass security for the sake of convenience , he explains . “ However , it ' s equally important that security is designed in such a way that it complements user behaviour and empowers them to do their jobs rather than just add additional , often unnecessary friction .”
Insurance helps offset ransomware attacks that get through The insurance industry is another established sector that must change quickly in order to keep up with commercial pressures , says Okta ’ s Rogers , and combining cyber insurance with best-practice efforts to protect against attacks is “ a sensible strategy ”.
“ Cyber insurance carriers increasingly consider strong identity controls as mitigating security risks , meaning that they will reduce premiums for companies who use them ,” says Rogers . “ If the worst happens , cyber insurance policies offer
76 November 2022