Ransomware and Data Protection Compliance

[rom1984]

Hi all,

 

I've published some guidance around ransomware and data protection compliance if anyone is interested. Any feedback on areas of improvement or where we could develop it further is welcome!

 

https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/security/ransomware-and-data-protection-compliance/

 

 

The initial plan was to look back at the cases from 2020/2021 and describe the main attacker tactics that we saw. However, it kind of developed and spun into a bigger piece where we started to look at the most common question we get.

 

There is a checklist of security considerations included within it - these are typically some of the main areas that we would look at when investigating whether appropriate technical and organisational controls were in place relevant to cyber/information security.

Edited March 10, 2022 by rom1984