• About
    ▼
    • Contact Us
    • Our History
    • Why Brokers Matter
    • Success Stories
    • Frequently Asked Questions
  • Insurance Coverages
    ▼
    • Workers Compensation
    • Directors and Officers
    • General Liability
    • Commercial Auto and Property
    • Umbrella
    • Volunteer Accident
    • Bonds for Nonprofits
    • Pollution
  • Who We Insure
    ▼
    • Conservation Corps
    • Trails and Biking Organizations
    • Land Trusts and Conservancies
    • Wilderness Alliances
    • Botanical Gardens/Public Gardens/Arboretums
    • Environmental Education Organizations and Outdoor Leadership Schools
    • Fire Safe Councils and Private Forestry Contractors
    • Municipalities
    • NonProfit Friends Groups and Alliances
    • AmeriCorps Programs
  • Financial Assurances
  • Conservation Safety
  • Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar
Conservation United Conservation United Request A Quote
  • Home
  • About
    • Contact Us
    • Our History
    • Why Brokers Matter
    • Success Stories
    • Frequently Asked Questions
  • Insurance Coverages
    • Workers Compensation
    • Directors and Officers
    • General Liability
    • Commercial Auto and Property
    • Umbrella
    • Volunteer Accident
    • Bonds for Nonprofits
    • Pollution
  • Who We Insure
    • Conservation Corps
    • Trails and Biking Organizations
    • Land Trusts and Conservancies
    • Wilderness Alliances
    • Botanical Gardens/Public Gardens/Arboretums
    • Environmental Education Organizations and Outdoor Leadership Schools
    • Fire Safe Councils and Private Forestry Contractors
    • Municipalities
    • NonProfit Friends Groups and Alliances
    • AmeriCorps Programs
  • Financial Assurances
  • Conservation Safety

How to Protect Your Organization From Ransomware

Date: April 29, 2020
Category:
  • Uncategorized
Author: Conservation United

According to cybersecurity firm Emsisoft, 205,280 organizations around the globe reported experiencing a ransomware attack in 2019—a 41% increase over 2018. This fact not only illustrates that ransomware attacks are on the rise, but it also underscores the need for organizations to act to prevent such attacks from impacting their operations.

What Is Ransomware?

According to the Cybersecurity and Infrastructure Security Agency (CISA), ransomware is a type of malicious software cyber actors use to deny access to systems or data until a ransom is paid. After the initial infection, the ransomware attempts to spread to shared storage drives and other accessible systems. If the demands are not met, the system or encrypted data remains unavailable. In some cases, data may be deleted altogether.

Ransomware attacks are particularly damaging, as they create massive business interruptions and can lead to significant reputational harm for the impacted organization.

Examine Your Ransomware Exposures

A strong commitment to cybersecurity is crucial to protect your organization from ransomware attacks. CISA recommends examining the following questions to determine if your organization is prepared to address the risks presented by ransomware:

  1. Backups—Does your organization back up all critical information? Are the backups stored offline? Has your organization tested your ability to revert to backups during an incident?
  2. Risk analysis—Has your organization conducted a cybersecurity risk analysis of the entire organization?
  3. Staff training—Has your organization trained its staff on cybersecurity best practices?
  4. Vulnerability patching—Has your organization implemented appropriate patching of known system vulnerabilities?
  5. Application whitelisting—Does your organization allow only approved programs to run on your network?
  6. Incident response—Does your organization have an incident response plan in place for ransomware attacks and has it been tested?
  7. Business continuity—Is your organization able to sustain operations without access to certain systems? If so, for how long?
  8. Penetration testing—Has your organization or a trusted third-party attempted to hack your own systems to test the security of your systems and your ability to defend against attacks?

PROTECTING REMOTE EMPLOYEES FROM CYBER ATTACKS

Although implementing a work-from-home program can provide a wide range of benefits for your business, allowing staff to work remotely also comes with unique risks and challenges. Specifically, having your employees work from home can increase their vulnerability to cyberattacks, which could result in costly consequences for your organization. With this in mind, it’s vital to ensure your work-from-home program is secure by utilizing top-notch technology and providing employees with adequate cybersecurity resources.

First, it’s important to assess your workplace technology to ensure it possesses proper cybersecurity features to combat work-from-home risks. At a glance, your organization’s software should have these key characteristics:

  • A virtual private network (VPN)—Having a VPN allows your employees to utilize a private, protected network connection. VPNs provide numerous cybersecurity features, such as hiding users’ IP addresses, encrypting data transfers, and masking users’ locations. If you don’t already have a VPN, you are missing a crucial step in implementing a secure work-from-home program. If you do already possess a VPN, make sure it’s fully patched.
  • Restricted access controls—Remote work technology should be equipped with the same account access restrictions as your on-site software. Furthermore, you should only allow competently, qualified, and trusted staff to have access to sensitive company data.
  • Anti-virus and malware protection—To protect your system from cyber threats, it’s critical that all remote work technology has the latest anti-virus, malware, and firewall protection software.

After you have prepared your technology, it’s time to provide employees with robust resources and training to ensure a secure work-from-home program. Consider providing staff training on the following topics:

  • Taking care of technology—Encourage employees to log out of their devices when they are finished working for the day and store all workplace technology in a secure, protected location.
  • Utilizing personal devices—If you allow staff to use personal devices for work purposes, be sure to enforce a Bring Your Own Device policy.
  • Conducting regular updates—Make sure employees know how to conduct regular software updates on all workplace technology. If you allow staff to use personal devices for work purposes, ensure they know how to conduct software updates on that technology as well.
  • Detecting signs of phishing—Educate your employees on how to detect phishing scams.
  • Reporting cyber concerns—Ensure that remote employees know how to report any cyber concerns that they might experience. Staff should report these problems to their supervisors and the IT department if needed.

 

For more cybersecurity strategies you can use to protect your businesses, contact Conservation United today.

Primary Sidebar

Recent Posts

  • Foreign Entity Registration – Organizations that are expanding, working in other States.
  • General Liability Exposures Every Conservation Organization Should Know
  • Using Small Equipment Safely on Trail Projects
  • Hiring a Subcontractor? Conservation United’s Subcontractor Management Plan can help!
  • 5 HR Trends to Monitor in 2022

Recent Comments

    Archives

    • October 2022
    • September 2022
    • March 2022
    • February 2022
    • January 2022
    • December 2021
    • November 2021
    • October 2021
    • September 2021
    • August 2021
    • July 2021
    • June 2021
    • May 2021
    • April 2021
    • March 2021
    • February 2021
    • January 2021
    • December 2020
    • October 2020
    • September 2020
    • August 2020
    • July 2020
    • June 2020
    • May 2020
    • April 2020
    • March 2020
    • February 2020
    • January 2020
    • December 2019
    • September 2019

    Categories

    • Business Insurance
    • California
    • Colorado
    • HR Compliance Bulletin
    • Insurance
    • Legal Update
    • Maryland
    • New York
    • OSHA
    • Safety Matters
    • Uncategorized
    • Wage & Hour
    • Workers Compensation

    Meta

    • Log in
    • Entries feed
    • Comments feed
    • WordPress.org
    (855) 570-2797
    Request A Quote
    • Home
    • Contact Us
    • About
    • Insurance Coverages
    • Who We Insure
    • Financial Assurances
    • Conservation Safety
    • Privacy Policy
    • Blog

    ©2023 Conservation United • All rights reserved
    Website Design and SEO by Stamm Web Solutions