This message was deleted.
# _generals
Slackbot
06/13/2021, 2:33 PMThis message was deleted.
m
Martin Zugec
06/13/2021, 2:55 PMAlso, what kind of guidance are you missing about ransomware? Prevention, detection, response? Learning about current best practices? Any other kind of insights?
This is very important feedback for me - at Bitdefender, we are currently working on tech marketing planning and I would like to include some deliverables that are not directly related to our business objectives (e.g. education, current trends etc.).
t
Tobias Kreidl
06/13/2021, 3:22 PMI can give you some insights on education, Martin, when I get a chance to put some more time into it. DR and response planning were some of the last projects I started working on and unfortunately was not able to complete before my retirement. I suspect that educational institutions have been hit with ransomware attacks as well as being broken into to steal records or to hit them with DDoS. It's not just Fortune 500 companies that are being targeted!
š 1
j
Jarian Gibson
06/13/2021, 4:29 PMPrevention and data protection.
š 1
Jarian Gibson
06/13/2021, 4:29 PMPrevention - training, software, security. Data protection - backups, DR plan, etc.
Jarian Gibson
06/13/2021, 4:31 PMAlso Response - what is your plan if/when something happens? Which leads back to data protection and what plans you will act on in what order.
š 1
Jarian Gibson
06/13/2021, 4:32 PMBackups first step. If there is an issue there. Next step would be DR plan. For example.
a
Arthur
06/13/2021, 4:32 PMIām currently mostly internet in Response plan(s). Would be nice to see some of them to build possible best plan for current company.
m
Martin Zugec
06/13/2021, 4:34 PMThanks for feedback, maybe we can prepare an outline as a community? I have access to data, Bitdefender labs and security experts to try and help with some of these topics
š 3
t
Tobias Kreidl
06/13/2021, 5:26 PM@Jarian Gibson, yes, there has to be a comprehensive response plan, including who takes charge of the technical, notification/communication (both internal and external), and legal/law enforcement aspects of an incident. Teams need to be established for each, with contact info for each member as well as backup personnel. If done right, it's a massive undertaking. And above all, 1) this needs to be practices with real, live scenarios under controlled conditions, and 2) the procedures must be reviewed on a frequent basis to assure things are relevant and up-to-date
šÆ 2
Tobias Kreidl
06/13/2021, 5:38 PMAs an added note, we also developed a flowchart with contingencies/role-up points so that people would do what they need to in the right order without either jumping the gun or lagging behind. Another thing we implemented was putting all this documentation offsite, in one or more secure locations and keeping the docs up-to-date so that if anything within the organization itself became unavailable that there would be access to all this critical information in safe, remote locations. This also needs to include comprehensive tracking of equipment, including configuration and network settings, as without all the bits and pieces, reconstruction would be a horror story -- especially if you have to redo your physical, on-premises rebuild from scratch after something like a fire or flood!
š 2
m
Mike Streetz (O_P)
06/14/2021, 4:09 PMhave for plan for how to restore things when your entire domain is down and you canāt log in.
Mike Streetz (O_P)
06/14/2021, 4:09 PMSo many things rely on AD, for instance your password manager perhapsā¦
a
Arthur
06/14/2021, 4:11 PM1st point: what to do as all PCās/Laptops are fully encrypted too. You canāt contact HelpDesk as everyone trying to call them. š You canāt reinstall W10 as itās delivered by different departmentā¦ š¤·š»āāļø
Arthur
06/14/2021, 4:15 PMI would recommend response plan on paper. With āpaper freeā offices you canbe in trouble in all electronic devices will be encrypted š
t
Tobias Kreidl
06/14/2021, 5:29 PM^^^ Hence my suggestion for putting documents in remote, unaffiliated locations. Keeping all your docs on-site and in electronic form is asking for trouble.
2 Views