SANS Ransomware Summit 2022
Speaker: Michael Rogers, Director - Technical Advisory Services, MOXFIVE
Through this talk I will provide insight into recovering from ransomware with an incident management lens and how businesses can avoid common pitfalls that lead to an exponential increase in expenditures, excessive business interruption time, and a prolonged and difficult claims process. I will also talk through ways to make recovery more efficient through incident coordination with the different key players (IE: breach counsel, client, vendors, forensics, and negotiations) and how clients can build in efficiencies into their playbook approach when working through an incident. Due to being able to work on 5-10 ransomware cases a month with a variety of teams (forensics, breach counsel, recovery, negotiations, etc.) and a range of industries and business sizes I've been able to pull out nuggets to continuously improve our tactics to get businesses up and running in the fastest and most safe and secure manner. While many teams understand the technical aspects of recovery, few have managed the overarching incident management process to create efficiencies for all of the teams involved. This talk will provide security teams with key takeaways they can use if impacted and also continue to push for a strong standard around incident management.
View upcoming Summits: www.sans.org/u/DuS
Download the presentation slides (SANS account required) at www.sans.org/u/1iaE